Howdie!
Post by Jasonwe have locking desktop out after 10 mins, I have a question some user what
the desktop locking after 5 mins do i just select a New gpo for say 5 users?
The "cleanest" way in terms of "can other administrators easily see
what's going on and can I easily document that" is creating another
(sub-)OU and move those users in there, yes.
However, if you feel this is overkill and you'd want to have these users
stick in that OU, you'll probably need to look at "Security Filtering":
http://www.frickelsoft.net/blog/?p=28
What you do there is tell GPMC to adjust permissions on the GPO so that
not "Authenticated Users" can read it but only specific users. In order
to apply a Group Policy, target objects need "Read" and "Apply Group
Policy" permission -- you change the permissions so that only your
target users can apply the policy. The rest you don't want, just don't
get those permissions and can't apply it.
Cheers,
Florian