Quantcast
Channel: Group Policy forum
Viewing all articles
Browse latest Browse all 19997

Loopback Processing - Computer Account Filtering

$
0
0

Hello,

In my lab I have a GPO called "Enforce Screensaver" linked to my "Contoso Users" OU that enforces the screensaver after 10 minutes of inactivity. 

I have a "Contoso Workstations" OU that contains all of my user workstations. I want to target a handful of these workstations and prevent them from inheriting the "Enforce Screensaver" GPO regardless of who logs in.

At the moment I have created a security group called "No Screensaver". This group contains the workstations I want to block the screensaver on. I then have a GPO called "Disable Screensaver". That GPO is linked to the "Contoso Workstations" OU and has a security filter targeting the "No Screensaver" security group. The Authenticated Users group has been removed from the filter. The GPO contains 2 settings:

  • Computer Configuration - Enable User Group Policy loopback processing mode :Merge
  • User Configuration - Enable screen saver : Disabled

Currently this does not work. The gpresults shows the computer is in the group and shows the GPO has been applied on the computer configuration side.

Is this not a supported configuration?



Viewing all articles
Browse latest Browse all 19997

Trending Articles