?
Solved

Screensaver group policy issue

Posted on 2011-03-08
2
Medium Priority
?
723 Views
Last Modified: 2012-06-22
Hello experts

I have an issue that is hopefully easy to resovle. I have a standard group policy applying to all staff whereby amongst many other things all staff get a screensaver set (Logon.scr) with a timeout of 15min and a force lock set so they have to enter their password to get back in (This was enforced by management recently). For a set of special staff who have complained I created a policy that is filtered to them only to bypass the password lock that seems to work well, but they are unable to adjust the screen saver properties since they are inheriting the other policy that sets the screen saver. How can I set it up so these people are able to have full control of screen saver settings ? Before anyone asks its not an option to make a new policy and target people for the locked screensaver only as opposed to the way ive been forced to try. Any help is greatly appreciated. Machine are all winxp sp3 and servers are 2008 r2
0
Comment
Question by:Jarrod
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 85

Accepted Solution

by:
oBdA earned 2000 total points
ID: 35080214
Move all the screen saver settings into their own GPO instead of the "all purpose" GPO, but still applied to all staff.
Then in the Delegation tab for the screen saver GPO, click the "Advanced" button, add the group that should not have the screen saver policy applied, and deny the "Apply Policy" permission.
0
 
LVL 6

Author Comment

by:Jarrod
ID: 35143893
Hi oBdA

Thanks for the quick response, exactly what I was after
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question