{"id":1256,"date":"2014-01-23T14:39:52","date_gmt":"2014-01-23T19:39:52","guid":{"rendered":"http:\/\/swildow.darktech.org\/wp\/?p=1256"},"modified":"2014-01-23T14:39:52","modified_gmt":"2014-01-23T19:39:52","slug":"the-most-frequently-asked-question-about-group-policy-in-a-workgroup-situation","status":"publish","type":"post","link":"http:\/\/www.wildow.com\/blog\/?p=1256","title":{"rendered":"The Most Frequently Asked Question About Group Policy In A Workgroup Situation"},"content":{"rendered":"
The Most Frequently Asked Question About Group Policy In A Workgroup Situation<\/span><\/h5>\n

http:\/\/www.theeldergeek.com\/gp07.htm<\/a><\/p>\n

Q: “I have <insert number> users on my computer and want to use Group Policy to set different policies for each user. How is this done?”
\nA: Install Windows 2000 Server or Windows Server 2003. This allows having multiple Active Directory based Group Policy objects. In Local Group Policy you can’t have multiple Local Group Policy objects.<\/span><\/p>\n

<\/p>\n

That’s the bad news. The good (or at least better) news is that it’s kinda-sorta possible to tweak Group Policy in the local setting. In the previous section I said to remember that Computer Configuration Registry.pol is implemented at the time the system is loaded. User Configuration Registry.pol comes into play when a user logs into the system.<\/span><\/p>\n

There is nothing you can alter about the Computer Configuration side of Group Policy because it loads when the system boots. There just simply isn’t any opportunity to specify breaking it apart into different users or groups. What that means is when you set a policy in the Computer Configuration section of Local Group Policy it’s going to apply to the entire computer — everyone — that uses the machine. No exceptions.<\/span><\/p>\n

In the User Configuration section of Local Group Policy we have a bit more latitude since the Registry.pol is ‘read’ when the user logs into the system, and that delayed ‘read’ is the key. By altering Read permissions on the Group Policy folder it’s possible to divide the User Configuration portion of Local Group Policy into two distinct groups of users;<\/span><\/p>\n