Windows XP Group Policy's in a workgroup

[Scott]

How do i setup group policies in a workgroup environment
so the policy only applies to a single user not all
users? i configured using the group policy editor and
made the changes under User Configuration, but when each
user logs on it applies to all, even the administrator.

please help.

thanks

 

[Carey Frisch [MVP]]

Please visit the Group Policy experts:
news://msnews.microsoft.com/microsoft.public.windows.group_policy

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

------------------------------------------------------------------------


| How do i setup group policies in a workgroup environment
| so the policy only applies to a single user not all
| users? i configured using the group policy editor and
| made the changes under User Configuration, but when each
| user logs on it applies to all, even the administrator.
|
| please help.
|
| thanks

 

[Steven L Umbach]

There is a unsupported hack that may work that involves giving deny permissions to
the \windows\system32\group policy\users folder. See link below. --- Steve

http://www.jsiinc.com/sube/tip2400/rh2492.htm

 

[Doug Knox MS-MVP]

http://support.microsoft.com/?id=293655
HOW TO: Apply Local Policies to all Users Except Administrators on Windows
2000 in a Workgroup Setting

Or see www.dougknox.com, Win XP Utilities, Windows XP Security Console for a
utility that will allow you to apply a number of the "user" Group Policies,
on a per user basis. Version 1.4 is currently available with version 2 on
its way soon.

 

[Roger Abell]

Hi Steve,

That one would not be too good in this case, where OP
wants to apply to only one account. It is not too bad when
they want to exempt one account or group however.

 

[Roger Abell]

Hi Carey,

Actually, over in that NG Active Directory level GPO use
is the most common topic, and a post like this is likely to
get a response like
"local policy by design applies to all accounts"

 

[Roger Abell]

You can adapt applying a set of policies to a specific
account, provided you can log into that account, from
the info in this article KB 293655
http://support.microsoft.com/?id=293655

 

[Steven L Umbach]

Thanks for the info Roger. --- Steve

Hi Steve,

That one would not be too good in this case, where OP
wants to apply to only one account. It is not too bad when
they want to exempt one account or group however.

 

[Roger Abell]

No problem Steve.
Your suggestion would of course do it, but as this
approach is unsupported by MS I am hesitant to see
it made the default for all accounts except one, that's
all.