Microsoft KB Archive/218601

= Local Group Policy Objects Cannot Be Set on a Per-User Basis =

Article ID: 218601

Article Last Modified on 2/22/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q218601



SYMPTOMS
You cannot configure Group Policy Objects (GPOs) to process different policies for different local users based on group membership. This is possible using only Active Directory Group Policy Objects.



CAUSE
Multiple local group policy objects are not supported in Microsoft Windows 2000.



RESOLUTION
To work around this behavior, implement Microsoft Windows NT 4.0 style policies using the Policy Editor tool. For more information, please see the following article in the Microsoft Knowledge Base:

185589 Guide To Windows NT 4.0 Profiles and Policies (Part 4 of 6)



STATUS
Microsoft has confirmed this to be a limitation in Microsoft Windows 2000. The ability to have multiple local group policy objects and have Access Control List (ACL) filtering for local group policy objects is being considered for inclusion in the next version of Microsoft Windows.

Keywords: kbenv kbprb KB218601

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.