Apply Computer GPO to only one user?

[Koldov]

Hopefully a quick and easy one...

 

As per the title, I am looking for a way to apply a computer GPO to only one user of the computer.

 

Example:

 

I have a computer GPP set to hide Quick Access (which opens this PC).

 

Obviously this is a Computer Configuration:

 

 

I have no problem with 'Quick Access' opening for other users, but when one user logs on I want it to use 'This PC' instead.

[mavhc]

You need to do loopback processing, and apply it just to that user, so put it in that user's OU, use security filtering to allow only that user (and domain computers probably) to access it. And enable loopback processing for GPOs

[Koldov]

First time I've used loopback so please bear with me...

 

so put it in that user's OU, use security filtering to allow only that user (and domain computers probably) to access it.

 

Ok just to be clear, the GPO with a 'Computer Configuration' is put in the User's OU, with Security Filtering for that User and Domain Computers..

 

 

And enable loopback processing for GPOs

 

And in that same GPO enable loopback processing - Computer Configuration > Policies > Administrative Templates > System > Group Policy - Configure user Group Policy loopback processing mode

 

 

Couldn't really work out if merge or replace was best though...?

[markwilfan]

First time I've used loopback so please bear with me...

 

 

 

Ok just to be clear, the GPO with a 'Computer Configuration' is put in the User's OU, with Security Filtering for that User and Domain Computers..

 

[ATTACH=CONFIG]57192[/ATTACH]

 

 

 

And in that same GPO enable loopback processing - Computer Configuration > Policies > Administrative Templates > System > Group Policy - Configure user Group Policy loopback processing mode

 

[ATTACH=CONFIG]57193[/ATTACH]

 

Couldn't really work out if merge or replace was best though...?

Merge. Replace would get rid of all other computer polices