Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Windows Server 2008 Enterprise Edition. How can I apply Group Policy object (GPO) user settings in GPO only if connecting to specific users?

Or to put it in another way: I want to apply a GPO to a specific user.

share|improve this question
Please provide an example of what you'd like to accomplish. – Shane Madden Jun 22 '11 at 15:06
You're not making sense. Do you mean that you want to apply a GPO to a specific user or group of users? If so, then use Security Filtering to filter on the specific user or group. – joeqwerty Jun 22 '11 at 15:17
up vote 5 down vote accepted

In the Security Filtering section of the GPO (on the Scope tab) remove Authenticated Users and add the user or group in question. This will make the GPO apply to only that user or group.

Take note that the GPO has to be in the Scope of Management (SOM) of the user, meaning it has to be linked to the OU or container (domain or site) where the user object exists.

share|improve this answer
Note that it is generally considered poor practice to filter based on user accounts. Best practice is to create a group specifically for the policy, and then add users, groups, or computers to that group. – Bacon Bits Jun 22 '11 at 15:39
@Bacon: True enough. I wanted to convey in my answer that it could be done based on user or group. Thanks for the assist. – joeqwerty Jun 22 '11 at 15:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.