Group Policy makes it easier to configure multiple settings in Windows. When you change a particular policy, depending on the configuration of your computer or user, it applies to either the computer, regardless of the users, or to the users, regardless of the computer they are using.

However, sometimes you want to apply certain policies, such as drive restrictions, only to non-administrators. In these situations, you can create a custom extension. Follow the instructions below.


  1. Group Policy is only available to Windows Pro and Enterprise users. If you are using Windows Home, this tutorial is not for you.
  2. This tutorial follows Windows 10, but you can follow the same procedure in Windows 7 and Windows 8.

Use Group Policy only for non-administrators

Because the standard Group Policy Editor does not allow us to apply policies only to non-administrators, we need to create our own local Group Policy extension using the Microsoft Management Console (MMC).

1. Press to start Win + R, type “mmc” and click the “OK” button to open the Microsoft Management Console. You can also search for MMCs from the Start menu.

2. In the Microsoft Management Console window, go to the “File” section that appears in the top navigation bar and select “Add / Remove Plug-ins”.

Non-Administrator Windows Group Policy Click Add Plug-in

3. The above function opens the Add or Remove Plug-ins window. Here you will find the “Group Policy Object Editor” extension in the left panel, select it and click the “Add” button.

Windows Group Policy for a non-administrator Select the Local Group Policy object option

4. Now we need to select all non-administrator accounts. Click the Group Policy Assistant Browse window.

See also  Microsoft Adds Linux Kernel to Windows - How Does It Affect You?

Windows Non-Administrator Group Policy Click Browse

5. Here, go to the “Users” tab, select Non-Administrators from the list of local users and groups, and click the “OK” button.

Windows Non-Administrator Group Policy Select non-administrators

6. Click Finish in the wizard to save the changes.

Windows Non-Administrator Group Policy Click Finish

7. You have added the extension with custom settings. Now we need to register the extension so we can use it at any time. To do this, go to “File” and select “Save As.”

Non-Administrator Windows Group Policy Click Save As

8. Navigate to the location where you want to save the extension, give the extension a name, make sure “File Type:” is set to “Microsoft Management Console Files (* .msc)”, and click the “Save” button. In the case below, we save the MSC file in drive C’s main search.

Related: Microsoft changed the full-screen shortcut for Windows 10 applications

Windows Group Policy No Administrator Save MSc

9. From now on, you can use the newly created plug-in to apply Group Policy settings to all users except administrators. Just go to the location where you saved the extension and double-click it.

Windows Non-Administrator Group Policy Open Msc

10. This function opens the plugin inside the MMC. Just like with a standard Group Policy editor, find the policy and double-click it to edit the policy settings. For example, we don’t want non-administrators to access certain system drives, so “Hide these configured drives on my computer” has been changed accordingly.

Non-administrator Windows Group Policy change policy

Follow the exact same instructions to apply the policy settings to a specific user. Instead of selecting a group, select only a specific user in step 5.

Please comment below and share your thoughts and experiences on using the above method to apply Group Policy settings to specific users or groups.

About the author


Leave a Comment