Solved

I need to exclude a PC from receiving a setting from the default domain policy

Posted on 2014-09-12
6
161 Views
Last Modified: 2014-09-12
There is a setting in the default domain policy that sets the screen saver lock at 10 minutes however, I have one1 PC that needs to be set at 30 minutes. How would I set it up that this one PC gets a different policy setting than the rest?

Thanks
0
Comment
Question by:jfholloway
6 Comments
 
LVL 9

Expert Comment

by:TunerML
Comment Utility
What version of Windows Server are you running?
0
 

Expert Comment

by:BYRONJACKSON
Comment Utility
You could deny access to the 10 minute policy on delegation. A deny will ensure that that PC will not receive the policy just be sure to set the object type to computer.   It needs READ to be able to apply the policy.


Another policy for 30 minutes can be set to allow if you need ... just alternate as you require
0
 
LVL 1

Accepted Solution

by:
bts86 earned 500 total points
Comment Utility
There are probably a dozen ways to do this. How I would go about it is to remove these settings from the default domain policy.

Then create 2 new GPOs, one with the 10 minute setting, one with the 30 minute setting.

Put the 1 PC into a separate OU and apply each of the new policies to the appropriate OU.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Expert Comment

by:BYRONJACKSON
Comment Utility
0
 

Author Comment

by:jfholloway
Comment Utility
It is a windows 2003 domain. Unfortunately the admin before me put everything into the default domain policy. There are several dozen policy settings that I would need to move to a new GPO before I can make the 2nd one.
0
 

Author Comment

by:jfholloway
Comment Utility
Thanks everyone for the help. I removed the screensaver setting from the default policy and created 2 separate ones and applied them accordingly.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now