Group Policy for Screen Saver

Hi guru,
I tried to enforce the Security Policy to enable Screen Saver for idle
PC, it works perfectly. I have some mobile notebook users need to be
disabled this settings, that notebook will be shared among a few
people. However, the policy is binded to the User-level.
How could I implement this Security Policy for that specific notebook?
Is it possible to exclude those PCs from the Security Group Policy?
thanks
Huang

Howdie!

Mr_Huang schrieb:
> I tried to enforce the Security Policy to enable Screen Saver for idle
> PC, it works perfectly. I have some mobile notebook users need to be
> disabled this settings, that notebook will be shared among a few
> people. However, the policy is binded to the User-level.
> How could I implement this Security Policy for that specific notebook?
> Is it possible to exclude those PCs from the Security Group Policy?

Once you have the policy in place, you cannot allow certain users to
untick the setting - as it's greyed out. That's a true policy's behavior.

Anyway, you could seperate the notebooks into their own OUs and apply
the loopback processing in merge mode. With that, you can use a
different setting for all users logging on to that notebook:
http://www.frickelsoft.net/blog/?p=22

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

Thanks for your prompt reply,
I have enabled the Screen Saver, and the idle policy for the Domain-
wise,
Does it mean I could create an OU for the notebook computers and
create a new "user policy" to override the setting from that have been
given to the users which inherit from the domain policy and enable the
loopback processing in merge mode?


On May 20, 5:16*pm, "Florian Frommherz [MVP]"
<flor...@frickelsoft.DELETETHIS.net> wrote:
> Howdie!
>
> Mr_Huang schrieb:
>
> > I tried to enforce the Security Policy to enable Screen Saver for idle
> > PC, it works perfectly. I have some mobile notebook users need to be
> > disabled this settings, that notebook will be shared among a few
> > people. However, the policy is binded to the User-level.
> > How could I implement this Security Policy for that specific notebook?
> > Is it possible to exclude those PCs from the Security Group Policy?
>
> Once you have the policy in place, you cannot allow certain users to
> untick the setting - as it's greyed out. That's a true policy's behavior.
>
> Anyway, you could seperate the notebooks into their own OUs and apply
> the loopback processing in merge mode. With that, you can use a
> different setting for all users logging on to that notebook:http://www.frickelsoft.net/blog/?p=22
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Windows Server - Group Policy.
> eMail: prename [at] frickelsoft [dot] net.
> blog:http://www.frickelsoft.net/blog.
> Use a newsreader!http://www.frickelsoft.net/news.html

Howdie!

Mr_Huang schrieb:
> Does it mean I could create an OU for the notebook computers and
> create a new "user policy" to override the setting from that have been
> given to the users which inherit from the domain policy and enable the
> loopback processing in merge mode?

Yes - try so. Create an OU for the notebooks and enable both loopback
and the user policy for the alternate screen saver settings. That should
do the trick.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

Hi Florian,

You mentioned "it actually impersonates the user logged in" and "If
the user has no permissions to apply the loopback-policies, the user’s
“normal” Group Policies will be applied."

Where can i assign necessary permission to the users who need to apply
loopback-policies?
thanks again
huang


On May 20, 6:59*pm, "Florian Frommherz [MVP]"
<flor...@frickelsoft.DELETETHIS.net> wrote:
> Howdie!
>
> Mr_Huang schrieb:
>
> > Does it mean I could create an OU for the notebook computers and
> > create a new "user policy" to override the setting from that have been
> > given to the users which inherit from the domain policy and enable the
> > loopback processing in merge mode?
>
> Yes - try so. Create an OU for the notebooks and enable both loopback
> and the user policy for the alternate screen saver settings. That should
> do the trick.
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Windows Server - Group Policy.
> eMail: prename [at] frickelsoft [dot] net.
> blog:http://www.frickelsoft.net/blog.
> Use a newsreader!http://www.frickelsoft.net/news.html