Both stores is sort-of the correct answer, in the registry as a result of
processing of what is in the GroupPolicy dir. Denying access to that
dir will prevent local policies from having an effect on the account
for which the access is denied.
See also
http://support.microsoft.com/kb/293655
noting that there is nothing magic about the directions provided being
for Administrator, they may be adapted to work for other accounts.
The problem is the amount of effort involved, especially if one later
wants to alter this.
"delerious" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I want to use group policy on my Windows 2000 Pro standalone workstation
>computer. Since it is not part of a domain, the group policy settings will
>apply to the entire computer. How can I get group policy to only apply to
>certain users? I read in a couple of postings that all of the group policy
>settings are stored under C:\WINNT\system32\GroupPolicy. In another
>article, it said that all of the group policy settings are stored in the
>registry. Which is correct? One workaround would be to set the
>permissions on the folder or registry key so that the only people who have
>access are the ones who you want the group policy settings to apply to. Or
>is there a better workaround?
Similar Threads
