multiple group policies on laptops

[Lordmathos]

Hi.
I have implemented various security gpo's in AD for laptops.

The main one being that the screensaver kicks in after 10 minutes and needs a password to unlock.

Is there any way I can get the laptop to implement a different policy when its not on the network.

Ideally i need the laptop not to implement a screensaver when its not on the network

 

[markdmac]

I would say you already have this configured ideally. If a user were to walk away from a laptop that is sitting in a shared environment, say at a customer location, then you would want to ensure the PC is locked down so noone can access it without authorization.

To accomplish your stated goal, you would need to have a log off script on the network that reverses the registry settings requiring the password. I would advise against doing this for the reasons listed above. Better to inconvenience a user to have to enter a password than deal with a data theft issue.

I hope you find this post helpful.

Regards,

Mark

 

[Lordmathos]

I know our setup is probably best practice for security but most of our laptop users use powerpoint for presentations and the screensaver keeps on kicking in during the presentation which is starting to really annoy our users

 

[acl03]

Mark - won't the cached credentials reinstate the screensaver rule when they log in off of the network?



Thanks,
Andrew

 

[Lordmathos]

the users have been logging on and off for the last couple of months now and the screensaver properties are always the same as the gpo tells it even if their on the network or off of the network

 

[markdmac]

If you were to reverse the setting of the GPO at logoff, I don't belive it will process again until they are connected to the network.

You could however just stop your policy from applying to them. Move the laptops to a seperate OU and block the policy.

I hope you find this post helpful.

Regards,

Mark

 

[EduardoA]

Laptops will take GPO setting even off the network. I have tested it and works great.