I have a GPO that is directly under the domain in the tree in group policy manager. Meaning it applies to all OUs in the domain. (This wasn't my doing)
The "Interactive logon: Message text for users attempting to log on" policy contains a security message in this GPO.
I want to be able to turn this message off for one or two servers, so that I can auto-log them in (the message interferes with this)
Is there a way I can override this policy for specific computers without reorganising the entire domain OU tree?
Most policies have an 'enabled' or 'disabled' option making it possible to override an 'enabled' with a more specific 'disabled' applied directly to an OU, but in this case that doesn't seem to be a possibility.
Create an link a GPO that applies only to these specific servers (either by linking at an OU where only these servers are located, or by linking above them and filtering the application of the GPO using an Access Control List) that defines these settings as blank strings. That will cause the registry entries these settings configure to be specified as blank strings, which will prevent the notice from being displayed.