Exclude domain user from group policy


  • Currently, I have Server 2008 and I have created a policy to enforce screensaver lockout after a certain time. However, I have a specific domain user profile that is used for some computers that have been set up for easy access. And from time to time we have the need to "loan" a laptops to auditors when they arrive on location. I would like to exclude that domain user from the Screensaver lockout policy. I believe it can be done using a WMI filter, but for the life of me I can't figure out how to target a specific user name. The only thing that I think might be a good start would be

    Select * From Win32_UserDomain ="username".  Understand I am a real noob at scripting, but all my searching has only given me about a thousand good ways to use WMI to find out what Operating System I am using. Perhaps I am barking up the wrong tree here. Any advice would be appreciated.



    Monday, May 23, 2016 7:15 PM


All replies