Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

Assign policies to different users

Jul 16, 2012 2:01AM PDT

Hello,

Currently, all of the user accounts on my computer use the same policy file which is "registry.pol", located in C:\WINDOWS\system32\GroupPolicy\User.

I want to create seperate policy files and apply them to individual users.

How can I do this? Thank you.

Discussion is locked

Michael45512 has chosen the best answer to their question. View answer

Best Answer

- Collapse -
I've found a workaround.
Jul 21, 2012 2:38AM PDT

My real goal was to exempt the administrator and standard user account from policy, and leave policy to the guest account.

What I did was restrict access to the gpt.ini file located in %systemroot%\system32\grouppolicy. I have fully denied access to the administrator and standard accounts, but gave the guest read permissions.

Thank you for the help.

- Collapse -
And my workaround to that
Jul 21, 2012 3:00AM PDT

Is to boot some LiveCD or LiveUSB and undo that.

After all this work, a bit easy to bypass. Don't you think?
Bob

- Collapse -
Answer
That feature is in XP Pro when you connect to Windows Server
Jul 16, 2012 2:18AM PDT
- Collapse -
My computer is standalone.
Jul 16, 2012 9:03AM PDT

The computer is not part of any domain. I use Local Computer Policy.

To clarify:

By default, all user accounts use the same file (registry.pol), located in \windows\system32\grouppolicy\user. What I want to do is set each user account to read from a different file, thus creating different polices for each user.

- Collapse -
Then you have to get a server in the setup.
Jul 16, 2012 11:16AM PDT

What you are asking for is not supported. Maybe someone can make login scripts to do something but they wouldn't be here so try this. Look into login scripts but this would be too much work for most.

Bob