Windows 7: Group Policy - Apply to a Specific User or Group

So this forum was a great help to me and I figured it was time to return the favor.

Login as local administrator and follow the original post to set the policies for the specific user on the local PC. This will create the necessary files. When you create a policy for a specific user on the local PC it creates a directory ("user") and a file (gpt.ini) in:

--C:\Windows\system32\GroupPolicyUsers--

Inside, there is a folder named with a SID. To copy the original settings to another computer (in my case the local account was named the same and had the same password) you'll have to go through the same procedure as stated by the original post on the other computer to create a new policy on the target PC. You don't need to save the MMC. You only do this to create the new SID directory. So, you'll see two entries in the path stated above. Go by the date modified to see the one you should modify. You can then copy the "User" directory and "gpt.ini" that you got from the original computer and override them on the target computer.

Log off and then login as the specific user and verify that settings have applied. Hope this helps.

Configured,

You are a life saver! I am now able to create user specific profiles without having to manually recreate the GPOs across each machine. I wish I could deploy a domain, but it is not in the client's interest.

How to Apply Local Group Policies to Specific User or Group in Windows,.

This also not works. Suppose there are 2 type of groups Administrator and Administrators then if i follow your above steps then as the topic title says that only 1 particular group will be affected ! But if i change any settings in Administrators group then it also affects Administrator group

Is there any working thing which will affect only 1 group out of 2 :\

Hello Adonix,

"Administrator" is for the built-in elevated Administrator account.

"Administrators" is for the group that all administrator accounts are added to by default.

so friend could you give me some tut so that i can create some new group like Administrators but with some disabled/less permissions ?

You could create a new group, then add users to the group. Afterwards, set policies for this group.

User Group - Create New or Delete

User Accounts - Add or Remove from Groups

However, as administrators, they have the rights to undo any set policy though.

Ok friend,..last thing any trick that if we add some extra user with administrators power, then is it possible to disable some settings for administrators group ? like disable access to many pc internal settings,..so that settings could not apply to administrator group :\
Or is it possible to create some special type of group which have features like "remote desktop users" group just the gifference will be that they can able to install softwares or able to use cmd ??

Kindly help.

Sure. You could assign user rights you want for the new group.

User Rights Assignment - Add or Remove Users and Groups

Ok i am successful in making new group and setting some permissions there,..but the new group i made not have permission to install any software :\ means the users in that group can't able to install anything,..could you help in this friend ? so that they can able to install softwares.

I'm not sure that installing software can be performed by any other group than administrators.