Creating local groups thats compatible to local group policy editor

Question

Hello!
Not sure this is correct forum or such but ill give it a shot.

I have a computer in a workgroup (100 % offline/locally) which i need to create GPO for. I have created 3 groups which needs 3 different GPOs.
2 admin groups
1 user groups

Since I need to role separate these 3. 1 of these admins are allowed to open powershell, run scripts, installer etc but not allowed to open event viewer or change time while the other admin are allowed to change time n view event viewer but not powershell, scripts etc.
And user are only allowed to open x amount of applications/explorers (like desktop) but not anything else.

But when Im trying to create a new policy through group policy editor, my 3 groups doesnt exist :/ Though its for W7 im thinking it should be similiar in W10.
https://www.sevenforums.com/tutorials/101869-local-group-policies-apply-all-users-except-administrators.html

How do i get my groups to be compatible with local group policy? Or is there another way to get above policies?

Thanks :)

Answer 1

Hi,

Welcome to ask here!
Based on my research and test, we can user the local group policy editor to edit Administrators, Non-Administrators, or per-user Local Group Policy Objects.

It means that there are 2 default groups we can use in the local group policy editor: Administrators and Non -Administrators.

And we can deploy the policy per-user.

The local group you created manually will not display in the local group policy edit.

Best Regards,

Answer 2

Hi FanFan-MSFT.
I have the same doubt as S3C3-4883. I know that there are already the two groups available, admin and not admin. And newly created groups don't appear as options. Is there a way to make the appear? To make them policy compatible? Thanks.