Individual User settings with Group Policy

  • Thread starter Thread starter daztrue
  • Start date Start date
D

daztrue

The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't find
a way to apply these to individual User accounts. Is this possible, or can
these snap-ins only be used to apply settings for all accounts, using the
same settings? Surely there is some way an administrator can make specific
settings to individual users and groups.
 
daztrue said:
The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't
find a way to apply these to individual User accounts. Is this possible,
or can these snap-ins only be used to apply settings for all accounts,
using the same settings? Surely there is some way an administrator can
make specific settings to individual users and groups.
Click to expand...

Of course you can do this. Create Organizational Units (OUs) and put
users/groups into each OU. Then set your Group Policy to apply to the OUs
as desired. For example, you might make OUs for Marketing, R&D, IT, regular
worker drones, etc.

Malke
 
That's the first time I've heard of OUs. I just looked it up in the Help file
and it refers to Active Directory, which I'm also not clear on, but from what
I've previously read about it, I get the impression it's more Windows
2000-related?

Anyway, I take it an OU would somehow need to be created with, and
appropriately named, with the Group Policy snap-in, for each OU required?
Could you talk me through the basic creation of an OU? I'd be grateful if you
could make Active Directory a bit clearer as well.

Thanks
 
daztrue said:
That's the first time I've heard of OUs. I just looked it up in the Help
file and it refers to Active Directory, which I'm also not clear on, but
from what I've previously read about it, I get the impression it's more
Windows 2000-related?

Anyway, I take it an OU would somehow need to be created with, and
appropriately named, with the Group Policy snap-in, for each OU required?
Could you talk me through the basic creation of an OU? I'd be grateful if
you could make Active Directory a bit clearer as well.
Click to expand...

Yes, of course OUs relate to Active Directory. No, this is not
Win2k-related. It's current server technology.

Go to TechNet and/or Daniel Petri's excellent website (www.petri.co.il) and
start reading.

Malke
 
daztrue said:
The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't find
a way to apply these to individual User accounts. Is this possible, or can
these snap-ins only be used to apply settings for all accounts, using the
same settings? Surely there is some way an administrator can make specific
settings to individual users and groups.
Click to expand...

Take a look at these articles.

The Most Frequently Asked Question About Group Policy in a Workgroup Situation
http://www.theeldergeek.com/gp07.htm

Lockdown by group using Local Computer Policy without Active Directory
http://www.windowsnetworking.com/kb...ocalComputerPolicywithoutActiveDirectory.html

How to apply local policies to all users except administrators
in a workgroup setting in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

You might also want to consider one of these programs.

Windows XP Security Console
Courtesy of Doug Knox, MS-MVP
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Good luck

Nepatsfan
 
Back
Top