How to apply group policy(GPO) to non-domain users on domain computers?

259 Views Asked by At

I have domain controller and domain computer. On domain computer I have several domain users and one local user. I want to apply specific restrictions (user policy) to local(non-domain) users on domain computer. Currently I can only apply user policy only to domain users. Is it possible?

I tried to add to security filter whole domain computer. It didn't apply to non-domain user.

EDIT: I know that domain polices doesn't apply to local users. So I want to find workarounds

1

There are 1 best solutions below

3
ErkinD39 On

You can only apply local policy to local users. Domain group policy applies to domain users and domain computers. Please note that computer policy part of the domain group policy applies to the computer, hence all users logging on to this computer (including local users) are effected from this computer part of domain group policy.

For example : A domain password policy defined in computer policy part of domain gpo will effect local users also.

If the same settings exist both in local policy and domain group policy then domain group policy overwrites.