policy for one computer

"this computer has been locked by" I have one computer that is in a shared
area and people keep walking away from it without logging out. The result is
that it locks them out.

How can I change this feature on this one computer. It's in a windows2000
domain, I am the admin. I want to change the policy on this computer only.

I have changed policies for all, but not just one.
thanks

Roger
Tue Jul 26 09:52:46 CDT 2005

What many do for such shared computers is to use the logoff screen saver
set to a low time threshold. Then, instead of the machine auto-locking it
logs off. That screen saver, IIRC, is from the resource kit.
To apply a different policy to one machine, either you need a GPO that
targets that one machine (by OU isolation or security group filtering), or
you need to have no GPO setting that policy so that local security policy
could be used.

--
Roger Abell
Microsoft MVP (Windows Security)

"instauratio" <instauratio@discussions.microsoft.com> wrote in message
news:CA1708F7-E58F-41F8-AD4A-31260597D9DB@microsoft.com...
> "this computer has been locked by" I have one computer that is in a
shared
> area and people keep walking away from it without logging out. The result
is
> that it locks them out.
>
> How can I change this feature on this one computer. It's in a windows2000
> domain, I am the admin. I want to change the policy on this computer only.
>
> I have changed policies for all, but not just one.
> thanks

instauratio
Tue Jul 26 10:51:03 CDT 2005

I have created an OU and after adding the specific computer to that OU, I
have applied a GPO.

However, I can't seem to find the specific security policy that directs a
computer to lock.



"Roger Abell" wrote:

> What many do for such shared computers is to use the logoff screen saver
> set to a low time threshold. Then, instead of the machine auto-locking it
> logs off. That screen saver, IIRC, is from the resource kit.
> To apply a different policy to one machine, either you need a GPO that
> targets that one machine (by OU isolation or security group filtering), or
> you need to have no GPO setting that policy so that local security policy
> could be used.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "instauratio" <instauratio@discussions.microsoft.com> wrote in message
> news:CA1708F7-E58F-41F8-AD4A-31260597D9DB@microsoft.com...
> > "this computer has been locked by" I have one computer that is in a
> shared
> > area and people keep walking away from it without logging out. The result
> is
> > that it locks them out.
> >
> > How can I change this feature on this one computer. It's in a windows2000
> > domain, I am the admin. I want to change the policy on this computer only.
> >
> > I have changed policies for all, but not just one.
> > thanks
>
>
>

WongTuckWah
Tue Jul 26 23:41:01 CDT 2005

No, what Roger meant was to get the Logoff Screen Saver file from Win2000
Resource Kit (winexit.scr). You can also able to download this file from the
internet if you do not have 2k000RK (just search for winexit.scr in google)

Below is a link to show how to configure this screen saver properly as it
might not work with legacy cliients. (this screen saver also works in XP and
w2k3)

http://support.microsoft.com/default.aspx?scid=kb;en-us;297267

If you intend to use GPO to set this screen saver, just create a new GPO and
go to User configuration > Administrative Templates > Control Panel >Display.
Enable to following 3 policies :
Screen Saver - Enable
Screen Saver executable name - wnexit.scr
Screen Saver timeout - say, 5 minutes

Remember to link this GPO to an OU that ONLY contains that single PC.

HTH.