Apply Local Group Policy to Non-Administrators in Windows 10  

Page 1 of 3 123 LastLast
    Apply Local Group Policy to Non-Administrators in Windows 10

    Apply Local Group Policy to Non-Administrators in Windows 10

    How to Apply Local Group Policy to Non-Administrators in Windows 10
    Published by Category: Security System
    24 Apr 2017
    Designer Media Ltd


    How to Apply Local Group Policy to Non-Administrators in Windows 10

    information   Information
    The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration and User Configuration settings of Local Group Policy objects can be managed.

    Multiple Local Group Policy is a collection of Local Group Policy objects (LGPOs) designed to provide improved management for computers that are not part of a domain. This collection consists of the following LGPOs:
    • Local Computer Policy - This LGPO applies policy settings to the computer and any users logging on to the computer. This is the same LGPO that was included in earlier versions of Microsoft Windows.
    • Administrators Local Group Policy - This LGPO applies user policy settings to members of the Administrators group.
    • Non-Administrators Local Group Policy - This LGPO applies user policy settings to users who are not included in the Administrators group.
    • User-Specific Local Group Policy - This LGPO applies user policy settings to a specific local user.

    This tutorial will show you how to create a Non-Administrators Local Group Policy MSC (Microsoft Saved Console) that applies user policy settings to all users except administrators in Windows 10.

    You must be signed in as an administrator to be able to apply non-administrators Local Group Policies.

    Note   Note
    The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    Multiple Local Group Policy objects (MLGPOs) are not available on domain controllers.

    Local Group Policy is processed in the following order, with the final LGPO taking precedence over all others:
    1. Local Group Policy (also known as Local Computer Policy).
    2. Administrators or non-administrators Local Group Policy.
    3. User-specific Local Group Policy.

    User-specific LGPOs are stored in the hidden C:\Windows\System32\GroupPolicyUsers system folder.

    EXAMPLE: Non-Administrators Local Group Policy
    Click image for larger version. 

Name:	Non-Administrators_Local_Group_Policy.png 
Views:	539 
Size:	39.8 KB 
ID:	126420



    Here's How:

    1. Press the Win+R keys to open Run, type mmc in Run, and click/tap on OK to open the Microsoft Management Console.

    2. Click/tap on Yes when prompted by UAC.

    3. In MMC, click/tap on File (menu bar), and click/tap on Add/Remove Snap-in. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-1.png
Views: 6583
Size:  29.6 KB

    4. Select Group Policy Object Editor in the left pane, and click/tap on the Add button in the middle. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-2.png
Views: 6614
Size:  45.5 KB

    5. Click/tap on the Browse button. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-3.png
Views: 6610
Size:  54.7 KB

    6. Click/tap on the Users tab, select the Non-Administrators group, and click/tap on OK. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-4.png
Views: 6613
Size:  24.4 KB

    7. Click/tap on Finish. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-5.png
Views: 6614
Size:  54.8 KB

    8. Click/tap on OK. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-6.png
Views: 7379
Size:  44.5 KB

    9. In MMC, click/tap on File (menu bar), and click/tap on Save As. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-7.png
Views: 6585
Size:  32.0 KB

    10. Navigate to and select where (ex: Desktop) you want to save this MSC to, type in a file name (ex: "Local Group Policies for non-Administrators") you want for the MSC, and click/tap on Save. (see screenshot below)

    Name:  Non-Administrators_Local_Group_Policy-8.png
Views: 6592
Size:  52.6 KB

    11. You will now only need to open this non-administrators Local Group Policy MSC (ex: "Local Group Policies for non-Administrators") whenever you want to configure policy settings that are only applied to all users that are not a member of the Administrators group. (see screenshots below)
    Note   Note
    Steps 1 to 10 above were only required to create this non-administrators Local Group Policy MSC.


    Name:  Non-Administrators_Local_Group_Policy-9.png
Views: 6574
Size:  19.8 KB
    Name:  Non-Administrators_Local_Group_Policy-10.png
Views: 6558
Size:  9.4 KB


    That's it,
    Shawn


  1.    10 Dec 2018 #1

    I’ve managed to create a group policy for all non admin users using MMC and GPEDIT snap-in (apologies for possible use of incorrect terminology here, I’m working at the edge of my knowledge!) on one of the laptops that I’m reasonably happy with and I’d like to apply/export/transfer this to the other machines. All the laptops are running latest edition of Windows 10.
    I’ve heard that you can use a command line tool called LGPO.EXE but I’m not sure how to use this in my case as I only want to apply the policy to non admin users.

    Elsewhere on this forum I saw a method which involved copying the registry.pol file from the (hidden) GroupPolicyUsers folder on the setup machine to the same place on the target machine but although I found the file on the setup machine the GroupPolicyUsers folder wasn’t there on the target machine. I’m obviously missing something.
    Any help and some ‘simple’ instructions would be fantastic.
    Many thanks in advance.
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 35,226
    64-bit Windows 10 Pro build 18312
    Thread Starter
       10 Dec 2018 #2

    Hello lentilbake, and welcome to Ten Forums.

    If the other laptops are running Windows 10 Pro, you would be able to backup and restore group policy settings using the method in the tutorial below if you like.

    Backup and Restore Local Group Policy Settings in Windows 10 | Tutorials
      My ComputersSystem Spec

  3.    10 Dec 2018 #3

    Thanks for the very prompt reply! I'll be trying it.

    On another subject, is it possible to disable the right click context menu for the windows/start key for a non admin standard user? I've tried 'disable context menus in the Start Menu' but this doesn't seem to do anything. 'Remove access to the context menus for the Taskbar' does work for the Task bar but not for the Windows key.

    I'd also like to be able to completely turn off the Start type search 'feature' too but from what I've read this doesn't seem possible.

    Many thanks
      My ComputerSystem Spec

  4. Brink's Avatar
    Posts : 35,226
    64-bit Windows 10 Pro build 18312
    Thread Starter
       10 Dec 2018 #4

    That would be the Win+X Quick Links menu, but I'm not aware of a way to disable it.

    I haven't seen a way to disable type search from Start either.
      My ComputersSystem Spec

  5.    4 Weeks Ago #5

    Ok, I configured the policy for non admin users on my test machine as I wanted it and used you script to create the backup folder and then copied it to the desktop on my target machine. When I run the restore script I get a command prompt window which says 'updating policy..' and then after a while:

    Computer Policy update has not completed in the expected time. Exiting...
    User Policy update has completed successfully.

    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.


    What did I do wrong? Should I have created a Non Admin User Policy with MMC and GPEDIT snap in like I did on the test machine first?

    Many thanks for your help on this, I feel I'm nearly there!
      My ComputerSystem Spec

  6. Brink's Avatar
    Posts : 35,226
    64-bit Windows 10 Pro build 18312
    Thread Starter
       4 Weeks Ago #6

    What does the event log report?
      My ComputersSystem Spec

  7.    4 Weeks Ago #7

    I think this is what you want, GPRESULT /R > GPReport.html:

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0 2018 Microsoft Corporation. All rights reserved. Created on ?13/?12/?2018 at 15:52:19 RSOP data for SCIENCE-E5530-0\Dereks on SCIENCE-E5530-0 : Logging Mode ----------------------------------------------------------------------- OS Configuration: Standalone Workstation OS Version: 10.0.17134 Site Name: N/A Roaming Profile: N/A Local Profile: C:\Users\Dereks Connected over a slow link?: No USER SETTINGS -------------- Last time Group Policy was applied: 13/12/2018 at 15:28:22 Group Policy was applied from: N/A Group Policy slow link threshold: 500 kbps Domain Name: SCIENCE-E5530-0 Domain Type: Applied Group Policy Objects ----------------------------- Local Group Policy The user is a part of the following security groups --------------------------------------------------- None Everyone Local account and member of Administrators group BUILTIN\Administrators BUILTIN\Users NT AUTHORITY\INTERACTIVE CONSOLE LOGON NT AUTHORITY\Authenticated Users This Organization Local account LOCAL NTLM Authentication High Mandatory Level
      My ComputerSystem Spec

  8. Brink's Avatar
    Posts : 35,226
    64-bit Windows 10 Pro build 18312
    Thread Starter
       4 Weeks Ago #8

    It's showing a slow domain connection at fault. You might try updating the policy again when you have a better domain connection to see if that was the issue.
      My ComputersSystem Spec

  9.    4 Weeks Ago #9

    (GPResult /H isn't an option apparently)
      My ComputerSystem Spec


 
Page 1 of 3 123 LastLast

Tutorial Categories

Apply Local Group Policy to Non-Administrators in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
How to Open the Local Group Policy Editor in Windows 10 The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration and User...
How to Apply Local Group Policies to Specific User in Windows 10 The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration...
How to Backup and Restore Local Group Policy Settings in Windows 10 The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration...
How to Reset All Local Group Policy Settings to Default in Windows 10 The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer...
Hello everyone. This is my first post to this forum. I hope someone can help me out. I am having a problem with Local Group Policy. I have been experimenting with this just for learning purposes and I am stumped by something. One of the first things...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:41.
Find Us