Hey guys, I have a windows 2012 R2 server and computers that are joined to a domain. There's a group policy or something that's enforcing computers to lock after 5 minutes of inactivity. Is there a possibility I can extend the lock time to a specific user or disable it for a user at all?
So I've found the default group policty that sets screen saver timeout for 300 seconds!
Can I create somehow a different policty for a specific user and disable that one for him? Because it applies to everytone right now. How should I go about this?
>>356542
Maybe read this before you break something?
https://technet.microsoft.com/en-gb/library/hh147307(v=ws.10).aspx
>>356551
Yes, I'll definitely read this. I wonder if it'll help resolve the issue if I'll know the basics, because I need to do it fast, so if you know how to do it, I would really appreciate it if you could tell me while I read up on this.
>>356553
So group policy is a hierarchical system (like CSS and NTFS permissions), where rules bubble up from the root and apply to everything above it unless they're overridden.
So you want your administrative users in a separate group, to which you can attach a GPO that overrides the one applied to all users.
>>356556
So here's a tree of what I have. The GPO policty is in the very top - so it applies to everyone. Would I want to create a bew group of selected users that's higher than that policy and apply the new policies to it?