Microsoft KB Archive/218601

From BetaArchive Wiki
Knowledge Base


Local Group Policy Objects Cannot Be Set on a Per-User Basis

Article ID: 218601

Article Last Modified on 2/22/2007



APPLIES TO

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Datacenter Server



This article was previously published under Q218601

SYMPTOMS

You cannot configure Group Policy Objects (GPOs) to process different policies for different local users based on group membership. This is possible using only Active Directory Group Policy Objects.

CAUSE

Multiple local group policy objects are not supported in Microsoft Windows 2000.

RESOLUTION

To work around this behavior, implement Microsoft Windows NT 4.0 style policies using the Policy Editor tool. For more information, please see the following article in the Microsoft Knowledge Base:

185589 Guide To Windows NT 4.0 Profiles and Policies (Part 4 of 6)


STATUS

Microsoft has confirmed this to be a limitation in Microsoft Windows 2000. The ability to have multiple local group policy objects and have Access Control List (ACL) filtering for local group policy objects is being considered for inclusion in the next version of Microsoft Windows.

Keywords: kbenv kbprb KB218601