How can I set only the user/computer part of a group policy to be applied?

A. Group Policies consist of two root parts, the user component and the computer component. Its possible to configure either part to be applied as follows:

  1. Start the Active Directory Users and Computers snap-in (Start - Programs - Administrative Tools - Active Directory Users and Computers)
  2. Right click on the container whose Group Policy link you wish to set the active part (e.g. user or computer) and select Properties
  3. Select the 'Group Policy' tab
  4. Select the Group Policy whose effect you wish to change and click Properties
  5. Select the General tab
  6. Under the disable section select to disable the Computer and/or User part
    Click here to view image
  7. Click Apply then OK

You should also now refresh the policy for both parts:

C:\> secedit /refreshpolicy machine_policy

C:\> secedit /refreshpolicy user_policy

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.