Edit Multiple Local Group Policy

  • Article

Applies To: Windows Server 2008

Multiple Local Group Policy is a collection of Local Group Policy objects (LGPOs) designed to provide improved management for computers that are not part of a domain. This collection consists of the following LGPOs:

  • Local Computer Policy. This LGPO applies policy settings to the computer and any users logging on to the computer. This is the same LGPO that was included in earlier versions of Microsoft Windows.

  • Administrators Local Group Policy. This LGPO applies user policy settings to members of the Administrators group.

  • Non-Administrators Local Group Policy. This LGPO applies user policy settings to users who are not included in the Administrators group.

  • User-Specific Local Group Policy. This LGPO applies user policy settings to a specific local user.

To edit Multiple Local Group Policy

  1. Open Microsoft Management Console.

  2. Click File and then click Add/Remove Snap-in.

  3. Click the Local Group Policy Editor in the Available Snap-ins list and click Add.

  4. Click the Browse button in the Select Group Policy Object dialog box.

  5. Click the Users tab in the Browse for the Group Policy Object dialog box.

  6. Click the user or group for which you want to create or edit local Group Policy. Click OK, click Finish, and then click OK.

  7. Locate and configure one or more policy settings.

Additional considerations

  • Multiple Local Group Policy objects (MLGPOs) are not available on domain controllers.

  • Local Group Policy is processed in the following order, with the final LGPO taking precedence over all others:

    1. Local Group Policy (also known as Local Computer Policy).

    2. Administrators or non-administrators Local Group Policy.

    3. User-specific Local Group Policy.

  • For more information about managing multiple local GPOs, see the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=65999).