Frequently Asked Question
There are times in a secure network environment when authentication is LOCAL and there's no Microsoft 'cloud' involvement, to apply policies to the local environment per user, or for all non-administrative users. Here's how.
CREATE A RESTORE POINT - This is optional, but if you are applying user policies and completely mess it up, that's an easy way back.
Load MMC from the start menu...
Now from the File menu, select Add/Remove Snap-in...
Locate the Group Policy Object... and click Add >
In the Policy Wizard, click Browse...
Now select the Users tab to set USER related policies...
Select the User for which you're setting a Policy, or Non-Administrators as is most common...
Now click OK...
You are now able to make policy changes in the normal way. There is a degree of help provided in the panel to the left, but for any setting you can look it up online for a more comprehensive explanation.
IMPORTANT: Group Policies are powerful, but also poorly explained. You may think you know what something does because it's name seems unambiguous, but it may not be. Always lookup the policies.
Once complete, close the MMC, and select NO when asked to save it, then open command prompt as shown...
Run gpupdate /force to apply the policies you just set to the machine/users.
Now, when you login as the user you've just policy edited, the policies will be applied. Remember, policies are not obvious or intuitive, look up each before setting it so you know the scope of its action, and TEST EVERYTHING to make sure the policy is stable before deploying it anywhere else.
