Managing MLGPOs

To edit different MLGPOs on a computer running Windows 7, follow these steps:

1. Log on to an administrative workstation running Windows 7 using a user account that is a member of the local Administrators built-in group.
2. Type mmc in the Start menu and then click mmc.exe when it appears under Programs in your search results.
3. Select File and then select Add/Remove Snap-in.
4. Select Group Policy Management Editor from the list of available snap-ins and then click Add.
5. Do one of the following:
   • To create a custom Microsoft Management Console (MMC) for editing the Local Computer Policy, click Finish.
   • To create a custom MMC for editing the Administrators Local Group Policy, click Browse, click the Users tab, select Administrators, click OK, and then click Finish.
   • To create a custom MMC for editing the Non-Administrators Local Group Policy, click Browse, click the Users tab, select Non-Administrators, click OK, and then click Finish.
   • To create a custom MMC for editing the Local Group Policy for a specific local user account, click Browse, click the Users tab, select that user account, click OK, and then click Finish.
6. Alternatively, instead of creating multiple different custom MMCs, you can add multiple instances of the Group Policy Management Editor snap-in to a single custom MMC console with each snap-in having a different MLGPO as its focus.

MLGPOs do not exist until you actually configure their settings using the Local Group Policy Editor. You can delete MLGPOs that you no longer need by following these steps:

1. Log on to an administrative workstation running Windows 7 using a user account that is a member of the local Administrators built-in group.
2. Click the Start button, type mmc in the Start menu Search box, and then click mmc.exe when it appears under Programs in your search results.
3. Respond to the User Account Control (UAC) prompt by clicking Continue.
4. Select File and then select Add/Remove Snap-in.
5. Select Group Policy Management Editor from the list of available snap-ins and then click Add.
6. Click Browse and then click the Users tab.
7. Right-click the user or group (Administrators or Non-Administrators) for which you want to delete the associated MLGPO, select Remove Group Policy Object, click Yes, and then click OK.

Note You can also disable an MLGPO temporarily by right-clicking its associated user or group, selecting Properties, and then selecting the check boxes to disable the user and machine (if available) portions of the MLGPO.

You can also choose to edit only the Local Computer Policy on a computer running Windows 7 (similar to the way it is done in earlier versions of Windows) by following these steps:

1. Log on to an administrative workstation running Windows 7 using a user account that is a member of the Administrators built-in group.
2. Type gpedit.msc in the Start menu and then click gpedit.msc when it appears under Programs in your search results.
3. Respond to the UAC prompt by clicking Continue.
4. Configure policy settings as desired.