Re: set local group policy using a script

From: Martin (Martin_at_discussions.microsoft.com)
Date: 12/16/04 

Date: Thu, 16 Dec 2004 15:39:03 -0800

Hi,
Thanx for the answer,

The settings I want to export and import is not the security settings.

The security settings you see in the "Security Templates" mmc is the same as
in gpedit.msc - Computer Configuration - Windows settings - Security Settings

And the policy's I want to export and import (automatic) is located in
gpedit.msc-Computerconfiguration -Administrative- Templates-Windows
components-Windows installer settings.

They are not listed in the "Security Templates" mmc !!

The template for the settings in gpedit.msc-Computerconfiguration
-Administrative- Templates, are stored i .adm files in the %windir%\inf
folder.

But these files at just templates, for the policy. I want to know if it is
possible to change these policy's "programtically" by using a script.

\Martin

"george" wrote:

> create MMC
> add snapins:
> Security Configuration and Analysis
> and
> Security Templates.
> Take one to the (most appropriate) Security templates and copy it (ie, right
> click it and Save As... with your own name.
> Go into this new template and set all the options the way you want them
> (eventually on multiple machines) and save the template back to disk.
> Now click on Security Configuration and Analysis and follow the instructions
> on the right hand side to create a new Database with your required settings
> inthere.
> Then look up the secedit command parameters, notably to see the "secedit
> /configure" .
> just enter secedit on the command line and follow the helpinfo from there.
> This should get you where you want to go.
> hope it wasn't too confusing and helps you further.
>
> george
>
>
>
> "Martin" <Martin@discussions.microsoft.com> wrote in message
> news:AD056EA5-A7B1-4C64-931C-8DD8B9651F54@microsoft.com...
> > Hi,
> > Thanks for the reply,
> >
> > So if I want to export gpedit.msc-Computerconfiguration -Administrative
> > Templates-Windows components-Windows installer settings , for
> > automatically
> > implementation on other computers (no ad access), how do I use Secedit for
> > this ?
> >
> > \Martin
> > "Stew Basterash" wrote:
> >
> >> Yes...
> >>
> >> Create a security template and apply it using Secedit.exe...
> >>
> >> Stew Basterash.
> >>
> >> "Martin" <Martin@discussions.microsoft.com> wrote in message
> >> news:F82BBBFE-249D-4587-AA47-318A8AACE5AB@microsoft.com...
> >> > Hi,
> >> >
> >> > Is it possible to set a Local Group policy using wsh (set policy using
> >> > the
> >> > registry is not an option) ?
> >> >
> >> > thanx in advance ..
> >> >
> >> > Martin
> >>
> >>
> >>
>
>
>

Relevant Pages

  • Re: Security Config and Analysis issue
    ... Changing to "propagate" actually replaced the settings. ... I have member servers that we want to roll out a custom security ... if i try to view the properties of the security items in the mmc, ...
    (microsoft.public.windows.server.security)
  • Re: INFOSEC/NACOSA sec. templates and EXPANDING the AD SChema?
    ... existing settings against the template you want to use. ... > INFOSEC/NACOSA sec. templates and EXPANDING the AD SChema? ... > Implementation Directive for Security Settings for Windows 2000 Domain ...
    (microsoft.public.windows.server.security)
  • Re: INFOSEC/NACOSA sec. templates and EXPANDING the AD SChema?
    ... existing settings against the template you want to use. ... > INFOSEC/NACOSA sec. templates and EXPANDING the AD SChema? ... > Implementation Directive for Security Settings for Windows 2000 Domain ...
    (microsoft.public.win2000.security)
  • Re: Security Config and Analysis issue
    ... I have member servers that we want to roll out a custom security template ... We created the template and verified the settings. ... when we re analyze we see a green check mark but when we go to the ... (not in the mmc), we still see power users and others that should have ...
    (microsoft.public.windows.server.security)
  • Re: Security Config and Analysis issue
    ... Changing to "propagate" actually replaced the settings. ... If MMC v3 is still broken, then i will try to work around it. ... I have member servers that we want to roll out a custom security template ...
    (microsoft.public.windows.server.security)