taggert

I am getting ready for some audits, so I am verifying all my security
settings. FOr almost a year, we have had group policy settings that force
all machines inactive for 15 minutes to lock down, fire up the screensaver,
and force user to ctrl-alt-del and sign back in when they return.

Now I find 2 machines, 1 the CEO of course, that do not ever time out or
lock down. Nothing of any interest in the event logs, no errors of any
sort, the login.scr file is still available on both machines.

Any thought on finding or resolving the problem? I have logged off, logged
on, run gpupdate with no errors, and I'm just not finding a resolution.


Anyone?

Thanks

v-xuwen@onlinemicrosoftcom vincent xu

Hi,

My understanding of your issue is: Group Policy are not applied to two
fixed computers.

1. Create a new OU for the two user (because I found the policy is set for
users. Correct me if I'm wrong)
2. Create a new GPO for this OU and set the lock down settings & screen
saver settings.
3. Reboot the two computers.
4. Run the following command on the client computer and let me know the GPO
name you use.

gpresult /z >c:\gp.txt

Note: Please send the gp.txt file to v-xuwen@microsoft.com.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

================================================== ====

Get Secure! - http://www.microsoft.com/security
================================================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
================================================== ====
This posting is provided "AS IS" with no warranties,and confers no rights.
================================================== ====

--------------------


70.147.109.164


force

screensaver,

logged

v-xuwen@onlinemicrosoftcom vincent xu

Hi ,

something found from your log:

1. Only the GPO Default Domain Policy is applied. This GPO is applied at
domain level.

2. Applied Group Policy Objects
-----------------------------
Default Domain Policy
MAIN

the GPO MAIN is not exists even it should.

In the Default Domain Policy, there are 7 GP applied. Please let me know
which GPs are applied.

I'm not sure why MAIN is not applied, please also let me know which GPs in
MAIN are applied.

Thanks.


Best regards,

Vincent Xu
Microsoft Online Partner Support

================================================== ====
Get Secure! - http://www.microsoft.com/security
================================================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
================================================== ====
This posting is provided "AS IS" with no warranties,and confers no rights.
================================================== ====

--------------------

for

GPO


rights.


or