I probably didn't word that right, but I think you got the jest of what I was saying. The main GPO includes the setting "hide screen saver tab". I have second GPO, using loop back, configured the exact same way accept the setting to hide the screen saver tab is disabled. The goal was to allow users logging into those specific servers, affected by the second GPO, the ability to disable the screen saver, at least for that login session.
You're second paragraph pretty much answered what I thought was probably the case. I don't want to filter out any specific groups of users because the policy needs to be applied to other systems they log into. More than likely, I'll be able to just disable the auto lock settings entirely for specific servers that don't fall under the compliance guidelines. - Sean On Fri, Sep 11, 2009 at 12:57 PM, Ben Scott <[email protected]> wrote: > On Fri, Sep 11, 2009 at 1:21 PM, Sean Martin <[email protected]> > wrote: > > I have a couple of OUs containing Computer Objects that need > > the same auto lock settings, except I don't want to disable > > access to the screen saver settings. > > Auto lock settings *are* the screen saver settings. How can you > both need those auto lock settings, and not need them? > > If you're thinking you'd like auto-lock to be the default but allow > users to override if they want, that's not how Group Policy works > for... well, almost everything. GP generally makes a setting > mandatory. For most things, there's no mechanism for the default vs > mandatory distinction, unfortunately. > > On Fri, Sep 11, 2009 at 2:04 PM, Sean Martin <[email protected]> > wrote: > > My goal is to allow users (just technical staff) logging into > > these specific servers the ability to disable the auto-lock > > function entirely. > > You can apply the auto lock/screen saver settings to users rather > than computers, and filter the technical staff out of that GPO, so > that all other users will get the auto-lock settings. > > -- Ben > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
