chaning someon's group policy

  • Thread starter Thread starter angryblack
  • Start date Start date
A

angryblack

We have a policy that locks all computers after 30
minutes. We are having two problems
1. it does not lock winxp computers
2. the policy is applied at the OU level and there have
been users that are making request to have their screen
saver lock more frequently or less frequently.

can anyone tell me how i might go about isolating their
account from the rest of the users and applying such a
policy or if it can be done at all.

One more question i just wanted to knwo a good tool to
use when applying or working with group policy
 
In order to apply a POLICY, a particular user or group of
users needs the READ and APPLY group policy right. Create
2 groups in A.D. Put the users that will apply one
screensaver policy in the one group and users that will
apply the other policy in the other group.

You would then create your second policy for people that
want a different screensaver etc... Once that is done,
just give one group READ and APPLY group policy rights to
one policy and the other group READ/APPLY group policy
rights to the other. By default, AUTHENTICATED USERS
have read and apply to all new polices created. Make sure
you remove that group, otherwise EVERYONE will apply both
policies.
 
Your best bet is to put those users in a different OU, maybe use all child
OUs at the same level, then move the user to the correct OU. Apply the GPO
that you want to each OU, and you have different settings.

As for tools... there are too many to list. There is not one tool to do it
all... but GPMC is close. It is free from Microsoft. You will also need
troubleshooting tools, such as gpresult, gpupdate, and the verbose logging
options.
 
Back
Top