Block User GPO on a single machine

[acl03]

How do I make it so my standard user GPO does not apply when i log onto a specific machine (like a server)?



Thanks,
Andrew

 

[markdmac]

Move the servers into a seperate GPO and block policy inherritance or explicitly block policy application in GPO security to the Administrator account. Give yourself an Admin account and a user account and only use the Admin account for admin tasks. You can use RunAs to avoid logging out if needed on your workstation.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[acl03]

Mark - thanks for the reply.

The issue is some people use Citrix/Terminal services to access apps seamlessly on their desktops. One of our policies is a 15 min password-protected screensaver. When a user is gone for 15 minutes, they have 2 "workstation locked" messages, one on their machine, and one that shows up from the terminal server.





Thanks,
Andrew

 

[markdmac]

For the terminal servers, use loopback processing.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[monsterjta]

markdmac is right on the Loopback Processing. Go with REPLACE MODE, not merge mode.

Hope This Helps,

Good Luck!

 

[acl03]

I'll try it out today, thanks guys.



Thanks,
Andrew