Local Group Policy Objects Cannot Be Set on a Per-User Basis (218601)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q218601

SYMPTOMS

You cannot configure Group Policy Objects (GPOs) to process different policies for different local users based on group membership. This is possible using only Active Directory Group Policy Objects.

CAUSE

Multiple local group policy objects are not supported in Microsoft Windows 2000.

RESOLUTION

To work around this behavior, implement Microsoft Windows NT 4.0 style policies using the Policy Editor tool. For more information, please see the following article in the Microsoft Knowledge Base:

185589 Guide To Windows NT 4.0 Profiles and Policies (Part 4 of 6)

STATUS

Microsoft has confirmed this to be a limitation in Microsoft Windows 2000. The ability to have multiple local group policy objects and have Access Control List (ACL) filtering for local group policy objects is being considered for inclusion in the next version of Microsoft Windows.
Modification Type:MajorLast Reviewed:11/21/2003
Keywords:kbenv kbprb KB218601
©2003 Microsoft Corporation. All rights reserved.