Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » RE: ScreenSaver timeout problem via GPO
RE: ScreenSaver timeout problem via GPO [message #344611] Tue, 15 December 2009 07:41
DavidElliott  is currently offline DavidElliott
Messages: 1
Registered: December 2009
Junior Member
Scott7, Did you ever get loopback to work or find out why it did not? I have
exact same issue, but did not see a resolution on the forum.

--
David. Elliott


"scott7" wrote:

> I have about 4 laptops at my company with special needs. I need the screen
> saver to be totally disabled on these 4. They are used for PowerPoint and
> special assignments and the screen needs to stay on and never lock. Let me
> give you some facts about these laptops so you know the situation.
>
> 1. The laptops are joined to a 2003 domain and live in various OUs.
> 2. There is a GPO at the domain level that activates a screen saver at 15
> minutes and requires a password to get back in. This is set in user
> configuration, administrative templates, control panel, display, then screen
> saver enabled, screen saver password enabled, and timeout enabled 900
> seconds. This policy is not enforced so if a lower OU blocks inheritance it
> will not run.
> 3. None of the OUs these laptops live in block inheritance so the domain
> policy to enable the screen saver will run.
>
> I tried to create a security group in active directory and a new GPO (using
> security filtering to only the new group) with a loopback policy (I’ve tried
> replace & merge) changing these screen saver settings. The new GPO was put
> at the domain level. It is set up to disable the screen saver under user
> configuration. I had to take out authenticated users and put in only the new
> group (security filter) so it would not run on the entire domain. I tried to
> place the PCs in the group and the GPO won’t run at all. If I put a user in
> the group the new GPO will run, but only if I put it in order to run after
> the other GPO that turns on the screen saver. With this said I turned off
> loopback processing and it would still run if in the correct order. So
> making a GPO with loopback in the domain does not seem to work. I have run
> gpresult and saw the PCs are in the security group, but the new GPO is not
> listed as running. If the user is in the group it runs in the order I set in
> GPM for the domain.
>
> Since the first method did not work I decided to try something else. Since
> we only have 4 laptops I decided to try and set a local GP on the laptop
> itself using loopback processing. I found one of the laptops and logged in
> as a local admin. Then I did the start, run, and typed gpedit.msc. I set
> the computer configuration, administrative templates, system, group policy
> area to use loopback. We want to use merge so domain and OU policies get
> combined with my new screen saver policy. On the local laptop I set the
> screen saver policy to disabled in the user configuration area. I still had
> no luck. I tried loopback with replace and merge, but the domain screen
> saver policy still won causing the screen saver to activate at 15 minutes
> with a lock.
>
> One more test I tried was to put the laptop in an OU that had blocking
> inheritance set up. Since the domain policy for the screen saver activation
> and lock was not enforced my laptop local policy worked fine. When in the
> blocked OU the domain policy never ran and the laptop used my local policy to
> disable the screen saver.
>
> I have searched the web and everything I read about loopback sounds like
> what I’m doing should work. Especially when I set the policy on the local PC
> I thought the loopback makes my screen saver setting to disable run last and
> win.
>
Previous Topic:wholesale Real Madrid 09/10 Home Soccer Jersey, replica Real Madrid Soccer Jersey
Next Topic:Authentication problems when DC is down
Goto Forum:
  


Current Time: Tue Jan 23 16:20:16 MST 2018

Total time taken to generate the page: 0.09992 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software