I'm having a bit of trouble with Group Policy Management. I recently changed the computer lock setting for our organization from 90 minutes to just 10 minutes, and while that wasn't a problem at first, I've faced some backlash. Now, we're planning to make exceptions for certain users, which feels pretty ironic. I've created a separate rule specifically for a group of users, but they're still getting locked out after 10 minutes. I made sure to enforce the new rule since the original one affects all authenticated users, but it's not working as I expected. I'm not used to dealing with these specific GPO rules, as I've mainly worked on the server and network side. Since my coworker, who set up the network, left, I've had to figure this out myself. Any help would be greatly appreciated! Edit: I think I fixed the problem, as my test computer is currently showing a lockout time of over 18 minutes now.
1 Answer
You might want to run `gpresult /h` on the machines that are affected to see which policies are actually being applied. Also, make sure that the OU location is properly set for the right policy. If that's not the issue, consider denying the first policy for the affected users in its scope. Good luck!
I think I may have figured it out myself! My test machine is still running and has hit 15:38 without a lockout. I linked it to the specific groups where the users are located. If any issues come up, I’ll definitely try your suggestion.