group-policywindowswindows 7windows-server-2008windows-server-2008-r2
Is there a way in group policy (windows server 2008) to apply a policy in computer configuration for specific users?
The reason is I want to apply 'Set roaming user profile path for all users logging onto this computer' in Computer Configuration\Administrative Templates\System\User Profiles but only for users logging on to the domain. I want to exclude it for local users so that if I logged into the local administrator account I get a local profile path like normal.
There is no specific Group Policy setting that allows you to manage .NET Trusts, however you can write startup scripts to use the caspol.exe utility to trust specific locations or Assemblies. Running .NET applications of file shares can cause some unusual and difficult to identify errors.
Trust a folder
set PATH=%PATH%;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
caspol -quiet -m -ag 1.2 -url file://server/path/* FullTrust
Trust a specific assembly
set PATH=%PATH%;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
CasPol -quiet -m -ag 1.2 -hash SHA1 -file \\server\path\asm.exe FullTrust
You will have to modify the path based upon the version of .NET you are using, and or adapt the above to VBScript or PowerShell depending on your environment and experience.
Best Answer
No for the most part you cannot do this. Computer settings generally apply a setting to a service running on that computer that is completely un-related to who logs in. For the most part it doesn't make any sense to apply a different setting per user.