Policy
Only allow local user profiles
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP
This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roaming profile is copied down to the local computer. If they have already logged on to this computer in the past, the roaming profile is merged with the local profile. Similarly, when the user logs off this computer, the local copy of their profile, including any changes they have made, is merged with the server copy of their profile. Using the setting, you can prevent users configured to use roaming profiles from receiving their profile on a specific computer. If you enable this setting, the following occurs on the affected computer: At first logon, the user receives a new local profile, rather than the roaming profile. At logoff, changes are saved to the local profile. All subsequent logons use the local profile. If you disable this setting or do not configure it, the default behavior occurs, as indicated above. If you enable both the "Prevent Roaming Profile changes from propagating to the server" setting and the "Only allow local user profiles" setting, roaming profiles are disabled. Note: This setting only affects roaming profile users.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\System\LocalProfile | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAdd the Administrators security group to roaming user profilesAt least Windows Server 2003 operating systems or Windows XP Professional
- UserConnect home directory to root of the shareWindows Server 2003, Windows XP, and Windows 2000 only
- ComputerControl slow network connection timeout for user profilesAt least Windows 2000
- ComputerDelete cached copies of roaming profilesAt least Windows 2000
- ComputerDelete user profiles older than a specified number of days on system restartAt least Windows Vista
- ComputerDisable detection of slow network connectionsAt least Windows 2000
- ComputerDo not check for user ownership of Roaming Profile FoldersAt least Windows Server 2003 operating systems, Windows XP Professional Service Pack 1, or Windows 2000 Service Pack 4
- ComputerDo not forcefully unload the users registry at user logoffAt least Windows Vista
- ComputerDo not log users on with temporary profilesAt least Windows 2000
- ComputerDownload roaming profiles on primary computers onlyAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerEstablish timeout value for dialog boxesWindows Server 2003, Windows XP, and Windows 2000 only
- UserExclude directories in roaming profileAt least Windows 2000