Apply Local Group Policy to Specific User in Windows 10  

    Apply Local Group Policy to Specific User in Windows 10

    Apply Local Group Policy to Specific User in Windows 10

    How to Apply Local Group Policies to Specific User in Windows 10
    Published by Category: Security System
    16 Apr 2020
    Designer Media Ltd


    How to Apply Local Group Policies to Specific User in Windows 10


    The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration and User Configuration settings of Local Group Policy objects can be managed.

    Multiple Local Group Policy is a collection of Local Group Policy objects (LGPOs) designed to provide improved management for computers that are not part of a domain. This collection consists of the following LGPOs:
    • Local Computer Policy - This LGPO applies policy settings to the computer and any users logging on to the computer. This is the same LGPO that was included in earlier versions of Microsoft Windows.
    • Administrators Local Group Policy - This LGPO applies user policy settings to members of the Administrators group.
    • Non-Administrators Local Group Policy - This LGPO applies user policy settings to users who are not included in the Administrators group.
    • User-Specific Local Group Policy - This LGPO applies user policy settings to a specific local user.

    This tutorial will show you how to create a user-specific Local Group Policy MSC (Microsoft Saved Console) that applies user policy settings to only a specific local user in Windows 10.

    You must be signed in as an administrator to be able to apply user-specific Local Group Policies.

    The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    Multiple Local Group Policy objects (MLGPOs) are not available on domain controllers.

    Local Group Policy is processed in the following order, with the final LGPO taking precedence over all others:

    1) Local Group Policy (also known as Local Computer Policy).
    2) Administrators or non-administrators Local Group Policy.
    3) User-specific Local Group Policy.[/LIST]
    User-specific LGPOs are stored in the hidden C:\Windows\System32\GroupPolicyUsers system folder.



    EXAMPLE: User-Specific Local Group Policy
    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy.png



    Here's How:

    1 Press the Win + R keys to open Run, type mmc into Run, and click/tap on OK to open the Microsoft Management Console.

    2 Click/tap on Yes when prompted by UAC.

    3 In MMC, click/tap on File (menu bar), and click/tap on Add/Remove Snap-in. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-1.png

    4 Select Group Policy Object Editor in the left pane, and click/tap on the Add button in the middle. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-2.png

    5 Click/tap on the Browse button. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-3.png

    6 Click/tap on the Users tab, select the user account name (ex: Brink2) you want for this user-specific Local Group Policy MMC, and click/tap on OK. (see screenshot below)

    The items highlighted in yellow below are groups and not users.

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-4.png

    7 Click/tap on Finish. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-5.png

    8 Click/tap on OK. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-6.png

    9 In MMC, click/tap on File (menu bar), and click/tap on Save As. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-7.png

    10 Navigate to and select where (ex: Desktop) you want to save this MSC to, type in a file name (ex: "Local Group Policies for Brink2") you want for the MSC, and click/tap on Save. (see screenshot below)

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-8.png

    11 You will now only need to open this user-specific Local Group Policy MSC (ex: "Local Group Policies for Brink2") whenever you want to configure policy settings that are only applied to the specified user (ex: Brink2) from step 6. (see screenshots below)

    Steps 1 to 10 above were only required to create this user-specific Local Group Policy MSC.

    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-9.png
    Apply Local Group Policy to Specific User in Windows 10-user-specific_local_group_policy-10.png


    That's it,
    Shawn



  1. ahelton's Avatar
    Posts : 101
    Windows 10 Pro 64-bit, Build 17763
       #1

    Hi Shawn,

    Is there a way to use the LGPO.exe utility to export/import policy settings for a specific user? I've been able to successfully do so for computer wide policies, but am wanting to import setting on a new computer for a specific user. I can't seem to find documentation on how to do that. Any help will be much appreciated.
      My Computer

  2. Brink's Avatar
    Posts : 48,681
    64-bit Windows 10 Pro for Workstations build 19631
    Thread Starter
       #2

    Hello Andrew, :)

    I haven't tried that before either, but you might see if the method in the tutorial below may be able to work for this. You could try manually excluding the backup for "Computer Configuration".

    Backup and Restore Local Group Policy Settings in Windows 10 Windows 10 Tutorials
      My Computers

  3. ahelton's Avatar
    Posts : 101
    Windows 10 Pro 64-bit, Build 17763
       #3

    Brink said:
    I haven't tried that before either, but you might see if the method in the tutorial below may be able to work for this. You could try manually excluding the backup for "Computer Configuration".
    I figured it out and it's surprisingly simple. Just need to enable hidden folders and go to C:\Windows\System32\GroupPolicyUsers and find the registry.pol file. Copy it onto a flash drive and then import it into the same location on the new machine. Afterwards, run the
    Code:
    GPUPDATE
    in an elevated command prompt and you are golden. Of course, all this is done in an admin account. I restarted the computer just to be safe, then logged into the user account where I want the policies applied and everything works as intended!

    I am setting up a new reference machine, but didn't want to have to manually create new policies for a specific user that has limited permissions. Glad to know there is a way to do this!
      My Computer

  4. Brink's Avatar
    Posts : 48,681
    64-bit Windows 10 Pro for Workstations build 19631
    Thread Starter
       #4

    Great news Andrew.

    That's basically what the backup tutorial above does, but for all 3 policy folders instead.
      My Computers

  5. ahelton's Avatar
    Posts : 101
    Windows 10 Pro 64-bit, Build 17763
       #5

    Awesome. Thanks for the input! I'll hopefully remember this a few months from now when I likely need to do this again :) Going to save the link to your tutorial in my Deployment folder for future reference.
      My Computer

  6. Zorbao's Avatar
    Posts : 2
    Windows 10 Professional
       #6

    Hello,

    I have just registered the forum.
    Is there a way to define LGPO for a newly created group, let's say "Newbies" for instance?
    I know it's possible for a newly created user (as you've already mentioned it).
    If it is not possible, do you know the reason why?
      My Computer


  7. Brink's Avatar
    Posts : 48,681
    64-bit Windows 10 Pro for Workstations build 19631
    Thread Starter
       #7

    Zorbao said:
    Hello,

    I have just registered the forum.
    Is there a way to define LGPO for a newly created group, let's say "Newbies" for instance?
    I know it's possible for a newly created user (as you've already mentioned it).
    If it is not possible, do you know the reason why?

    Hello Zorbao, and welcome to Ten Forums.

    Yes, you should be able to just select the group at step 6 instead of a user name.
      My Computers

  8. Zorbao's Avatar
    Posts : 2
    Windows 10 Professional
       #8

    Well, I know this can be done through Group Policy Management Console (gpmc.msc), but I did not found any equivalent using Local Group Policy Editor (gpedit.msc). Do you have any clue to achieve this operation using gpedit.msc?
      My Computer

  9. Brink's Avatar
    Posts : 48,681
    64-bit Windows 10 Pro for Workstations build 19631
    Thread Starter
       #9

    Zorbao said:
    Well, I know this can be done through Group Policy Management Console (gpmc.msc), but I did not found any equivalent using Local Group Policy Editor (gpedit.msc). Do you have any clue to achieve this operation using gpedit.msc?
    You would need to use the same MMC in the tutorial to apply the group policy to a specific group.
      My Computers


 

Tutorial Categories

Apply Local Group Policy to Specific User in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:48.
Find Us




Windows 10 Forums