Have you ever tried to apply a Group policy rule to an individual one user or single group on the standalone Windows server?
Before Windows 20008, setting individual policies was not possible out of the box, but it could be achieved with a little workaround. You had to disable reading of GPO directory to the administrator user (or users you don’t want to apply GPO) and then apply it.
With Windows Server 2008 it is possible to create different GPO for every user on the server. This is a nice to have feature, because Terminal Servers may not be a part of AD domain.
To enable this feature please follow these steps:
• Start MMC console from the run or command prompt
• File > Add remove snap-ip
• Choose group policy objects > Add
• (This is important) Do not confirm it yet. Choose browse, then tab users. (Here you will be able to select local users and groups GPO will be applied to).
• Click Finish
• Define all required GPO’s
• Close MMC
• In the command prompt type gpupdate /force (this will apply GPO immediately).
