I am trying to figure out how to setup a GPO that will lock down ALL my users ability to change screensaver and assign a specific screensaver by default. I have tested this through assigning to users configuration within GPO settings, however I cannot get it to work within computer settings. I'm trying to assign GPO to the computer instead of users. I want the ability to add users and filter them out from this policy, for those users that have approval. What is the best way to accomplish this?