Link to home
Start Free TrialLog in
Avatar of Jaime Campos
Jaime CamposFlag for United States of America

asked on

GPO - Screen Saver


I have a system that we use for board meetings. We have applied a GPO to lock all systems screensaver within a domain and applied to Domain Users. We have a group called No-Lock and customized so that users that are in this group will not have the GPO screensaver lock. This GPO is applied to the users. Now the techs that setup the boardroom PC uses his account for which is excluded and part of the No Lock group. When he logs into the pc after some time the screen saver comes up as if the GPO is in fact being applied when it shouldn't. Not sure if replication to this system from the Domain Controller isn't updating or enforcing the policy correctly. The tech account should not be getting the GPO on that system. What things can I check to find a resolution?


Avatar of Joseph Moody
Joseph Moody
Flag of United States of America image

You will want to run a GPResult /h report.htm /f command on that computer with that tech signed in. It will show you if the policy is applied or not. If will also show you what (if any GPO) is configuring that setting.
Avatar of Jaime Campos


I had ran GPResult and saw that Screensaver is denied which is good, but then after 45 min we thought it was working then screensaver came back. We made sure that local screensaver/power settings was not set. Does GPO take precedence over local account settings?

I ensured that the DC was replicating correctly with no errors. Everything looks good. Now not sure how to check from system. I can ping DC I ran gpresult all looked good. ?? Thanks
Hello, nimdatx!

Sounds like your groups are what is causing it.

If those users are part of the domain users group, that GPO is going to get applied to them, unless you create an explicit "Deny" for "Apply group policy" to the "No-Lock" users.

Hello the tech is a member on 'no lock' group which is setup to deny that GPO policy. The tech logs into his system and it works. It's just this system for some reason.

Have you taken a look at the local settings via gpedit.msc?

No sir...that sounds good. What am I looking for here? Does GPO take president over local policy?
Avatar of Sean Plemons Kelly, CISSP
Sean Plemons Kelly, CISSP
Flag of United States of America image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you so much! I will check local policies. I will also find out how to troubleshoot system connection to DC.