Jump to content

Does anyone know of a way to stop Windows 8.1 Pro from accepting group policy updates without leaving the domain?

 

We have a domain-wide policy to set and enforce a power plan on our workstations, making the displays fall asleep after 10 min. and requiring a password to unlock the workstation after that.

 

I excluded my workstation from this section of the GPO using the targeting options; but it seems that my workstation gives precisely zero cares and won't stop putting my displays to sleep and locking my machine after 10 min, even after changing the power plan manually; which is super-annoying when reading long articles and not interacting with the machine.

 

Any ideas?  Our president's Surface Pro 3 keeps doing the same thing and it's driving him mad as well.

"VictoryGin"

Case: Define R6-S, Black | PSU: Corsair RM1000x, Custom CableMod Cables | Mobo: Asus ROG Zenith Extreme X399 | CPU: Threadripper 1950X | Cooling: Enermax Liqtech TR4 360mm AIO with Noctua NF-F12's | RAM: 64GB (8x8GB) G.SKILL Flare X DDR4-2400 | GPUs: AMD Radeon Vega Frontier Edition; NVIDIA Quadro P400 | Storage: 3x Intel 760p 128GB NVMe RAID-0 | I/O Cards: Blackmagic Intensity Pro, Mellanox ConnectX-3 Pro EN 40GbE NIC, StarTech FireWire, StarTech Serial/Parallel  | Monitors: 3x 30” First Semi F301GD @ 2560x1600, 60Hz; 50" Avera 49EQX20 @ 3840x2160, 60 Hz | Keyboard: Black/Gray Unicomp Classic | Mouse: Logitech MX Master 2S | OS: Windows 10 Enterprise LTSB 2016

Link to comment
https://linustechtips.com/topic/403056-disabling-group-policy-updates/
Share on other sites

Link to post
Share on other sites

When you change the policy do gpupdate /force from CMD or PowerShell. To disable the PC/devices on the domain from getting GPO updates put them in a empty OU and block inheritance (right click container and select "block inheritance"). Before you do that though, make sure they picked up the policy you wanted them to have because the policy will skip them.

See my blog for amusing encounters from IT workplace: http://linustechtips.com/main/blog/585-life-of-a-techie/

Link to post
Share on other sites

When you change the policy do gpupdate /force from CMD or PowerShell. To disable the PC/devices on the domain from getting GPO updates put them in a empty OU and block inheritance (right click container and select "block inheritance"). Before you do that though, make sure they picked up the policy you wanted them to have because the policy will skip them.

I've tried doing gpupdate /force and all it does is re-enforced the GPO :angry:

 

I'll try moving myself to a different OU in a bit.  I'll be OK for me since I could care less about having any GPOs on my machine; but there are a few I want to enforce on the President's Surface b/c otherwise stuff like forced admin shares, RDP, and firewall rules get all messed up.  I'll play around and see what happens...thanks for the quick reply!

"VictoryGin"

Case: Define R6-S, Black | PSU: Corsair RM1000x, Custom CableMod Cables | Mobo: Asus ROG Zenith Extreme X399 | CPU: Threadripper 1950X | Cooling: Enermax Liqtech TR4 360mm AIO with Noctua NF-F12's | RAM: 64GB (8x8GB) G.SKILL Flare X DDR4-2400 | GPUs: AMD Radeon Vega Frontier Edition; NVIDIA Quadro P400 | Storage: 3x Intel 760p 128GB NVMe RAID-0 | I/O Cards: Blackmagic Intensity Pro, Mellanox ConnectX-3 Pro EN 40GbE NIC, StarTech FireWire, StarTech Serial/Parallel  | Monitors: 3x 30” First Semi F301GD @ 2560x1600, 60Hz; 50" Avera 49EQX20 @ 3840x2160, 60 Hz | Keyboard: Black/Gray Unicomp Classic | Mouse: Logitech MX Master 2S | OS: Windows 10 Enterprise LTSB 2016

Link to post
Share on other sites

I've tried doing gpupdate /force and all it does is re-enforced the GPO :angry:

 

I'll try moving myself to a different OU in a bit.  I'll be OK for me since I could care less about having any GPOs on my machine; but there are a few I want to enforce on the President's Surface b/c otherwise stuff like forced admin shares, RDP, and firewall rules get all messed up.  I'll play around and see what happens...thanks for the quick reply!

Remember, you can always create another policy in that OU with blocked inheritance. Anything set before that, will be overwritten by the policy you make.

See my blog for amusing encounters from IT workplace: http://linustechtips.com/main/blog/585-life-of-a-techie/

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×