Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm administrating an ou. And I have applied a rule for screen saver lockout. Some OU's under my OU have applied the settings and some haven't..., What can be the cause of this?

Is there a way to check applied settings on a specific machine?


share|improve this question

Some OUs may have 'block inheritence' configured, which will prevent higher GPOs from being applied. On the face of it, this seems the most likely cause. You can find the setting under Group Policy Management, as shown here:

GP Block Inheritence

You should be able to evaluate the Resultant Set of Policy for particular user/computer combinations by using the tools provided in the Group Policy Management MMC console. There's more information on this here:

This is where you find the wizard you need:

GP Modeling Wizard

share|improve this answer

My tool of choice for checking applied GPOs is rsop.msc. - it's included on windows xp and newer. Just run rsop.msc from the command line on the computer/user you wish to check, and it will give you all applied settings/GPOs.

share|improve this answer
up vote 0 down vote accepted

My problem was in the scope settings of the GPO, my users under the OU wheren't configured there.

@Trondh is a very nice tool you can run on your users machine to see the result accumulation of all policy's for this user and machine.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.