How to apply group policy to certain users instead of entire computer?

  • Thread starter Thread starter delerious
  • Start date Start date
D

delerious

I want to use group policy on my Windows 2000 Pro standalone workstation
computer. Since it is not part of a domain, the group policy settings
will apply to the entire computer. How can I get group policy to only
apply to certain users? I read in a couple of postings that all of the
group policy settings are stored under C:\WINNT\system32\GroupPolicy. In
another article, it said that all of the group policy settings are stored
in the registry. Which is correct? One workaround would be to set the
permissions on the folder or registry key so that the only people who have
access are the ones who you want the group policy settings to apply to.
Or is there a better workaround?
 
Both stores is sort-of the correct answer, in the registry as a result of
processing of what is in the GroupPolicy dir. Denying access to that
dir will prevent local policies from having an effect on the account
for which the access is denied.
See also
http://support.microsoft.com/kb/293655
noting that there is nothing magic about the directions provided being
for Administrator, they may be adapted to work for other accounts.
The problem is the amount of effort involved, especially if one later
wants to alter this.
 
FYI: I'm sure you are aware that the concept of multiple local policies in
not available until Windows Vista.
 
Back
Top