Our environment consists of a 2003 Active Directory with about 50% split regarding XP and Windows 7 clients. Our security policy states that by default everyone's desktop should lock at 2 hours for the screensaver. For select users, the policy states their Desktops should lock at 15minutes after inactivity.
We have applied the 2 hour policy by creating a GPO and linking it to the Organization OU. This works fine for all clients. Security Filtering has the GPO applying to all Authenticated users.
For the 15min screensaver lock, we have the same GPO and linked it to the domain but this time by Security Filtering we only apply it to a particular security group. This GPO is not working correctly.
We are currently drawing a blank on how to either implement or fix the 15minute GPO for screensaver lock.