How not to apply

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I know this will be simple for several of you but for some reason my mind
can't grab this concept....

Screen saver is activated via GPA at the domain level. I have a few PC's
that we need to turn this feature off.

How do I do this short of creating a new OU for these machines, blocking
inheritance, and then maintaining second GP identical to the Domain one
except for turning off the screen saver?

I am trying to avoid having to maintain two separate GP's that are
identical except for the Screen saver issue. I don't mind activating a
second one just to turn off the screen saver, as long as I can keep the root
domain level policy applying with my default settings.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You can configure filtering of Group Policy using either OUs or security
groups.

http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/filter.htm

For the scenario you describe, you can create a second GPO that only
contains the relevant screensaver setting, then create a group containing
the relevant users and give them the "Read" and "Apply Group Policy"
permission for the GPO. (Removing those permissions for all other users.)
Remember that 2000 & XP machines & users can apply multiple GPOs, you don't
need to rely on just one.

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"Bruce Musgrove" <blackhole26removeme@comcast.net> wrote in message
news:e78psYeSEHA.4068@TK2MSFTNGP09.phx.gbl...
>I know this will be simple for several of you but for some reason my mind
> can't grab this concept....
>
> Screen saver is activated via GPA at the domain level. I have a few PC's
> that we need to turn this feature off.
>
> How do I do this short of creating a new OU for these machines, blocking
> inheritance, and then maintaining second GP identical to the Domain one
> except for turning off the screen saver?
>
> I am trying to avoid having to maintain two separate GP's that are
> identical except for the Screen saver issue. I don't mind activating a
> second one just to turn off the screen saver, as long as I can keep the
> root
> domain level policy applying with my default settings.
>
>