How can I set a policy for a local group to make it unavailable to a specific user?

Group PolicyIt is to modify the relevant configurations in the registry. The Group Policy uses its more comprehensive management organization method to manage and configure the settings in various objects, which is far more convenient and flexible than manually modifying the registry, more powerful. How to SetLocal Group PolicyDoes it take effect for specific users? A detailed description is provided below.

Applicability:"User Configuration.

The User configuration part of the Local Group Policy is stored in the C: \ WINDOWS \ system32 \ GroupPolicy \ User \ Registry. pol file.

You only need to set proper NTFS permissions for the file to set local group policy user configuration.

For example, if you want to enable the "Disable registry editing tool" policy item in the "Group Policy"> "user configuration"> "manage template"> system, the "Disable registry editing tool" policy is invalid for Test users ).

Follow these steps:

1. Open the "my computer" window and enter the C: \ WINDOWS \ system32 \ GroupPolicy \ User folder.

2. Open the Properties dialog box for the Registry. pol file in this folder.

3. Switch to the "Security" tab, click the "add" button, add the Test user, and select the "deny" check box on the right of the "read" permission.

4. Click OK to save the settings.

Most of the settings of "User configuration" in the Group Policy are loaded into the Registry after the User logs on. At this time, the system cannot read C: \ WINDOWS \ system32 \ GroupPolicy \ User \ Registry. the pol file, so that the corresponding group policy settings cannot be applied.

Note that the "Computer Configuration" section of the Group Policy has been loaded to the Registry and is located under HKLM before the user logs on. Therefore, we cannot customize the Group Policy by modifying the NTFS permission.

We want to make the Group Policy invalid for a specific user, usually the Administrator group, so we can also follow the method described in KB: http://support.microsoft.com/kb/293655/zh-cn.

Summary:

We hope that this article will introduce the user configuration section for setting local group policies. Methods that do not take effect for specific users can be helpful to readers. more knowledge about group policies remains to be explored and learned by readers.