Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

How to remove domain gpo from a laptop... 1

Status
Not open for further replies.

elmurado

IS-IT--Management
Jul 15, 2003
673
AU
Hi,
I have a user who is in a OU which has a GPO linked to it that amongst other things enables the screensaver password after five minutes.

He is not in the office and won't be for a few weeks but needs to have this removed as he is giving presentations with his laptop and doesn't want it to lock every few minutes.

How can I change his setting 'remotely'. The domain GPO is obviously cached somewhere as it is overriding any local GP changes that I make to disable the screensaver/password.
I have an elevated OU for this here on our DC but it's no good to him as he's on the other side of the country.

TIA.
 
okay, managed to work out how i could escalate his privileges and then do a reg hack to disable the screen saver. Then it was fine.It will simply change it back when he gets back to the office.

thanks.
 
Ok worked out I could escalate privileges and then hack the reg to allow this temporarily.

Does anyone know where the 'cached' GPo is kept on a machine that doesn't logon to the domain?

Thanks
 
The (potentially) simpler way to do this would be to give him the logon details of a local user/admin for that laptop. They could then do whatever they liked without the domain settings interfering!
 
Only problem with that I guess is having his email etc under one profile and trying to use another.
I don't know if there is an 'out of office' setting that can be applied to GPO's is there?
ie one setting for when on the domain and one for when standalone.
 
The settings are resident in the HKEY_USERS portion of the registry. Each user that has logged on to that laptop will have a S-1-blahblahblah. This is the SID (or is it GUID, I can never remember). If you can identify which is his number, you may be able to change it there, however, it will change back anytime he is hooked to the network. I would think the easier way would be Dogers suggestion of having a domain login, and a local user/admin login for presentation purposes.

Dogers,
Good suggestion. Have a star!!!!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top