Loopback processing needs enabling

Sent from my POS BlackBerry  wireless device, which may wipe itself at any 
moment

-----Original Message-----
From: David Lum <[email protected]>
Date: Thu, 21 Jul 2011 18:25:19 
To: NT System Admin Issues<[email protected]>
Reply-To: "NT System Admin Issues" 
<[email protected]>Subject: GPO inheritance puzzler

1.       At the root of my domain I have a GPO to enable screen saver and set 
the timeout. Link is enabled but not enforced.

2.       Lower down in my OU tree is an OU with blocked inheritance in it, and 
linked to that OU is a GPO to disable the screensaver.

If I look at GP Inheritance on this OU I see what I'd expect - the enforced 
GPO's and the one GPO disable screensaver GPO. In theory the screensaver should 
be disabled. Both GPO's have the user configuration set for the screensaver

If I run GP modeling on a system in this blocked inheritance OU, the GPO that 
enables screensaver and sets timeout shows up as an applied GPO, and the 
settings tab shows that the screensaver enabled and settings.

Both GPO's have "authenticated users" in security filtering. How does the root 
one win out over being blocked and the OU-specific GPO in its place?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to