Solved

I need to exclude a PC from receiving a setting from the default domain policy

Posted on 2014-09-12
6
169 Views
Last Modified: 2014-09-12
There is a setting in the default domain policy that sets the screen saver lock at 10 minutes however, I have one1 PC that needs to be set at 30 minutes. How would I set it up that this one PC gets a different policy setting than the rest?

Thanks
0
Comment
Question by:jfholloway
6 Comments
 
LVL 9

Expert Comment

by:TunerML
ID: 40319571
What version of Windows Server are you running?
0
 

Expert Comment

by:BYRONJACKSON
ID: 40319574
You could deny access to the 10 minute policy on delegation. A deny will ensure that that PC will not receive the policy just be sure to set the object type to computer.   It needs READ to be able to apply the policy.


Another policy for 30 minutes can be set to allow if you need ... just alternate as you require
0
 
LVL 1

Accepted Solution

by:
bts86 earned 500 total points
ID: 40319585
There are probably a dozen ways to do this. How I would go about it is to remove these settings from the default domain policy.

Then create 2 new GPOs, one with the 10 minute setting, one with the 30 minute setting.

Put the 1 PC into a separate OU and apply each of the new policies to the appropriate OU.
0
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

 

Expert Comment

by:BYRONJACKSON
ID: 40319591
0
 

Author Comment

by:jfholloway
ID: 40319711
It is a windows 2003 domain. Unfortunately the admin before me put everything into the default domain policy. There are several dozen policy settings that I would need to move to a new GPO before I can make the 2nd one.
0
 

Author Comment

by:jfholloway
ID: 40319725
Thanks everyone for the help. I removed the screensaver setting from the default policy and created 2 separate ones and applied them accordingly.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question