Group policy setting policy for all users

Posted on 2009-12-29
Last Modified: 2013-11-25
When I create a default profile on a Windows XP, it is inheriting the User Settings in Group Policy for the copied user to all users. Users are not getting the Group Policy settings that are not designated for them, but inheriting it from the default profile.
example: I have a policy that automatically locks a PC after a period of inactivity. This policy is applied to my account. If I use my account to create a local default user, all users that use that PC are getting the automatic lock regardless of what is set to their account in Group Policy.
Question by:dale-gregory
    LVL 3

    Expert Comment

    Is there possibly a computer policy over  riding your user's policy that is effecting the policies?
    LVL 35

    Expert Comment

    by:Joseph Daly
    I would agree that doesnt sound right. I would first check as stated to make sure you dont have a conflicting GPO being applied.

    You could run a GPupdate /force and then a gpresult while logged in as the other user to see what is being applied.

    A few other normal things to check make sure you arent trying to set user policies based on a computer or vice versa.

    Author Comment

    When I run the gpresult, under the other user's account, I get the correct settings for that user. There is normally a setting under the gpedit/Local Policy under User Settings\Windows Settings Control Panel that can be disabled to stop the locking screensaver. The Control Panel Option isn't even listed in the Local Policy now.
    In any case, I have a Pc that is locking on every user after a period of inactivity. Not totally a bad thing, but the user is having a fit to have it removed and I cannot get it to apply their GPO User Settings to their local account.
    LVL 24

    Expert Comment

    You can run RSOP.MSC to check which is the actual policy applied on domain user.
    Run gpupdate /force & check what is logged into event viewer of application or system log.
    Check folder redrection in GPO as well as Loopbackpolicy enabled on domain level.

    Author Comment

    I have tried these solutions and I am awaiting feedback from my user. Thanks for your help and I will follow up as soon as I findo ut how this is working under their account logon.

    Accepted Solution

    After trying all of this, I still had the issue existing. I ended up logging into the device and setting the local administrator as the Default User. I then had one of my technicians who normally does the setup logon and verify settings and then log in as local administrator and assign their account as the Default User. this fixed the problem, but I still do not know why the user was inheriting my AD GPO settings instead of the one that was assigned to them.
    Even when running rsop.msc with the user logged in, it reported that the user was being applied the correct GPO.
    Thanks for your help.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Agile and Scrum have almost become synonymous. Have you wondered what's the difference? Scrum is just one way to be Agile. It is the most popular which leads to the common confusion. Agile actually refers to a philosophy shared by group of developme…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now