Managing Local Group Policy in Vista

 Executive Summary:

You can configure and process multiple Local Group Policy objects in Windows Vista.

Windows Vista gives you the ability to manage multiple Local Group Policy objects for machines that aren't in an Active Directory domain.

In Windows Vista, you can configure Local Group Policy, Administrators Local Group Policy, Non-Administrators Local Group Policy, and user-specific Local Group Policy objects.

Computers that aren't managed as part of a Windows Active Directory (AD) domain, such as shared lab computers, library kiosks, and demo workstations, can have security and other configuration settings defined in their Local Computer Policy. One of the main drawbacks to having these settings defined in the Local Computer Policy object in Windows versions prior to Windows Vista is that only one policy can be applied to machines that aren't connected to a domain, and that policy will affect all the users of that machine. Therefore, administrators who need to log on and manage the machine without restrictions can't easily avoid settings that apply to standard users. . . .