Overriding GPO with User Configurations on specific servers?

[jcastillop]

Hi all,

I'm new to Active Directory, so I'm a little bit lost.

I have created a GPO, which activates the screen saver after a certain amount of idle time. These options are in the User Configuration settings of the GPO, so I have disabled the Computer Configuration settings.

The GPO is linked to the domain, and applies to Authenticated users.

Here is my problem:
There are several servers the users make terminal server connections to. If they leave these sessions idle, the screen saver activates. I am interested in overriding the GPO on these servers, but I find I can only override it on a username basis, not on a machine name basis.

Can I override a GPO with User Configuration options that applies to Authenticated Users on specific servers?

-I have overridden it for a couple of users by giving them "Apply Group Policy: DENY" permissions to the GPO, however, I cant work out how to do it on a machine-basis.

Is this even possible?

-Thanks in advance!

 

[tfg13]

You should be able to place the servers in a new OU named something like "servers" (place all the servers in that OU), then you should be able to block inheritance.

 

[jcastillop]

I have also found this:

Group Policy Processing Loopback Mode

http://www.microsoft.com/resources/...2003/all/deployguide/en-us/dmebb_gpu_kvam.asp