Published by


Brink's Avatar
Administrator

Posts: 25,197

Show Printable Version 


How to Apply Local Group Policies to Specific User in Windows 10

information   Information
The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration and User Configuration settings of Local Group Policy objects can be managed.

Multiple Local Group Policy is a collection of Local Group Policy objects (LGPOs) designed to provide improved management for computers that are not part of a domain. This collection consists of the following LGPOs:
  • Local Computer Policy - This LGPO applies policy settings to the computer and any users logging on to the computer. This is the same LGPO that was included in earlier versions of Microsoft Windows.
  • Administrators Local Group Policy - This LGPO applies user policy settings to members of the Administrators group.
  • Non-Administrators Local Group Policy - This LGPO applies user policy settings to users who are not included in the Administrators group.
  • User-Specific Local Group Policy - This LGPO applies user policy settings to a specific local user.

This tutorial will show you how to create a user-specific Local Group Policy MSC (Microsoft Saved Console) that applies user policy settings to only a specific local user in Windows 10.

You must be signed in as an administrator to be able to apply user-specific Local Group Policies.

Note   Note
The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

Multiple Local Group Policy objects (MLGPOs) are not available on domain controllers.

Local Group Policy is processed in the following order, with the final LGPO taking precedence over all others:
  1. Local Group Policy (also known as Local Computer Policy).
  2. Administrators or non-administrators Local Group Policy.
  3. User-specific Local Group Policy.

User-specific LGPOs are stored in the hidden C:\Windows\System32\GroupPolicyUsers system folder.

EXAMPLE: User-Specific Local Group Policy
Name:  User-Specific_Local_Group_Policy.png
Views: 1298
Size:  38.5 KB



Here's How:

1. Press the Win+R keys to open Run, type mmc in Run, and click/tap on OK to open the Microsoft Management Console.

2. Click/tap on Yes when prompted by UAC.

3. In MMC, click/tap on File (menu bar), and click/tap on Add/Remove Snap-in. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-1.png
Views: 1286
Size:  29.6 KB

4. Select Group Policy Object Editor in the left pane, and click/tap on the Add button in the middle. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-2.png
Views: 1289
Size:  45.5 KB

5. Click/tap on the Browse button. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-3.png
Views: 1279
Size:  54.7 KB

6. Click/tap on the Users tab, select the user account name (ex: Brink2) you want for this user-specific Local Group Policy MMC, and click/tap on OK. (see screenshot below)
Note   Note
The items highlighted in yellow below are groups and not users.


Name:  User-Specific_Local_Group_Policy-4.png
Views: 1292
Size:  24.9 KB

7. Click/tap on Finish. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-5.png
Views: 1266
Size:  54.6 KB

8. Click/tap on OK. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-6.png
Views: 1264
Size:  44.6 KB

9. In MMC, click/tap on File (menu bar), and click/tap on Save As. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-7.png
Views: 1275
Size:  28.2 KB

10. Navigate to and select where (ex: Desktop) you want to save this MSC to, type in a file name (ex: "Local Group Policies for Brink2") you want for the MSC, and click/tap on Save. (see screenshot below)

Name:  User-Specific_Local_Group_Policy-8.png
Views: 1273
Size:  51.7 KB

11. You will now only need to open this user-specific Local Group Policy MSC (ex: "Local Group Policies for Brink2") whenever you want to configure policy settings that are only applied to the specified user (ex: Brink2) from step 6. (see screenshots below)
Note   Note
Steps 1 to 10 above were only required to create this user-specific Local Group Policy MSC.


Name:  User-Specific_Local_Group_Policy-9.png
Views: 1266
Size:  20.1 KB
Name:  User-Specific_Local_Group_Policy-10.png
Views: 1251
Size:  11.6 KB


That's it,
Shawn