I have a system that we use for board meetings. We have applied a GPO to lock all systems screensaver within a domain and applied to Domain Users. We have a group called No-Lock and customized so that users that are in this group will not have the GPO screensaver lock. This GPO is applied to the users. Now the techs that setup the boardroom PC uses his account for which is excluded and part of the No Lock group. When he logs into the pc after some time the screen saver comes up as if the GPO is in fact being applied when it shouldn't. Not sure if replication to this system from the Domain Controller isn't updating or enforcing the policy correctly. The tech account should not be getting the GPO on that system. What things can I check to find a resolution?