Windows Vista has the ability to create multiple local group policies (GPOs). This means you no longer have to muck with NTFS permissions when you want to configure different settings for different users. Windows 2000/XP/2003 had a LGPO limit of 1 whereas Vista can create multiple configurations of GPOs.

In order to configure Multiple Local Group Policies perform the following steps:

1.         Go to Start – Run and type MMC. Press Enter.
2.         A new MMC window will open. Go to File – Add Remove Snap-in.

3.         In the Add or Remove Snap-ins window, scroll down until you reach Group Policy Object Editor. Click on it and then click on the Add button.

4.         In the Welcome window you’ll see that "Local Computer" is selected by default. Click on the Browse button.

5.         In the Browse for a GPO window, click on the Users tab.

NOTE: You will see all the local user accounts (these are all the users created on your local computer, NOT users from the AD domain). You can select each one of these users and click on Ok.

NOTE:  You can also select groups. This will allow you to set an LGPO for any user that is a member of the local group.

6.         Select any local user or the Administrators or the Non-Administrators group, one at a time. You’ll need to perform step 2-5 again for any local user you want to create an LGPO for.

When you have finished click Ok.

7.         In the MMC console window you will now have one Local Computerusername Policy for each one of the users you’ve selected.

You can test your settings by configuring an easy-to-notice setting such as adding or removing items to or from the Start menu or Desktop. Then logon as different users and notice the difference.

Tags | Windows Vista