Individual User settings with Group Policy

D

daztrue

The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't find
a way to apply these to individual User accounts. Is this possible, or can
these snap-ins only be used to apply settings for all accounts, using the
same settings? Surely there is some way an administrator can make specific
settings to individual users and groups.
 
M

Malke

daztrue said:
The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't
find a way to apply these to individual User accounts. Is this possible,
or can these snap-ins only be used to apply settings for all accounts,
using the same settings? Surely there is some way an administrator can
make specific settings to individual users and groups.

Of course you can do this. Create Organizational Units (OUs) and put
users/groups into each OU. Then set your Group Policy to apply to the OUs
as desired. For example, you might make OUs for Marketing, R&D, IT, regular
worker drones, etc.

Malke
 
D

daztrue

That's the first time I've heard of OUs. I just looked it up in the Help file
and it refers to Active Directory, which I'm also not clear on, but from what
I've previously read about it, I get the impression it's more Windows
2000-related?

Anyway, I take it an OU would somehow need to be created with, and
appropriately named, with the Group Policy snap-in, for each OU required?
Could you talk me through the basic creation of an OU? I'd be grateful if you
could make Active Directory a bit clearer as well.

Thanks
 
M

Malke

daztrue said:
That's the first time I've heard of OUs. I just looked it up in the Help
file and it refers to Active Directory, which I'm also not clear on, but
from what I've previously read about it, I get the impression it's more
Windows 2000-related?

Anyway, I take it an OU would somehow need to be created with, and
appropriately named, with the Group Policy snap-in, for each OU required?
Could you talk me through the basic creation of an OU? I'd be grateful if
you could make Active Directory a bit clearer as well.

Yes, of course OUs relate to Active Directory. No, this is not
Win2k-related. It's current server technology.

Go to TechNet and/or Daniel Petri's excellent website (www.petri.co.il) and
start reading.

Malke
 
N

Nepatsfan

daztrue said:
The Group Policy snap-in, along with its extended snap-in, Local Security
Policy, provide numerous settings under User Configuration, but I can't find
a way to apply these to individual User accounts. Is this possible, or can
these snap-ins only be used to apply settings for all accounts, using the
same settings? Surely there is some way an administrator can make specific
settings to individual users and groups.

Take a look at these articles.

The Most Frequently Asked Question About Group Policy in a Workgroup Situation
http://www.theeldergeek.com/gp07.htm

Lockdown by group using Local Computer Policy without Active Directory
http://www.windowsnetworking.com/kb...ocalComputerPolicywithoutActiveDirectory.html

How to apply local policies to all users except administrators
in a workgroup setting in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;293655

You might also want to consider one of these programs.

Windows XP Security Console
Courtesy of Doug Knox, MS-MVP
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Good luck

Nepatsfan
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top