Using Windows Group Policy on a Non-Domain Computer

Today I learned that you can use a perfectly functional copy of Group Policy on any Windows computer (NT or later, of course), even if it's not a domain server or on a domain at all. I haven't tested to see what happens if you try to use it to override settings that are controlled by the real Group Policy server, but that is a science experiment for tomorrow.

Anyway, if you want access to all those fun settings on any computer, do this:

1. Acquire administrative access
2. Use the Run dialog box to launch mmc (Microsoft Management Console)
3. Press Ctrl+M to manage snap-ins
4. On the left, choose Group Policy Object and click Add
5. Click Finish to close Select Group Policy Object
6. Click OK to close Add or Remove Snap-ins
7. Expand Local Computer Policy and its subfolders to discover settings

There are all kinds of fascinating settings there. To modify policies, double-click them; to add entries (e.g. deployed printers), use the appropriate choice under the Action menu.

When you close MMC, you can save your view state so you can go back to where you were later. MMC also accepts all the snap-ins found in the Administrative Tools folder, so you can shove them all into one window/instance if you want.