Re: export/import local group policy?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Mark-
Easy is relative :). There is no way to export a local GPO. What you can do, fairly roughly, is copy the contents of c:\windows\system32\grouppolicy from one machine to another. However, its not completely that cut and dry. First off, security policies are not represented in the local file system and therefore can't be copied (you would have to export security settings using a tool like secedit.exe). Secondly, just copying an existing local GPO's files from one machine to the next may not guarantee that it actually processes, because the local GPO's current version number, held in those files, would need to be incremented from the existing version on the target to ensure that the changed local GPO was detected.

The second possibility is here: http://www.sdmsoftware.com/group_policy_scripting, which lets you use Powershell to write scripts that can modify domain or local GPO settings (same caveat around local security policy applies however). Disclaimer--it’s a commercial product and its my company, but I did want to mention it as we do have some folks using it for what you've asked :-).

Let me know if you have any questions on this.

Darren

Darren Mar-Elia
Group Policy Resource Site: http://www.gpoguy.com
Group Policy Blog: http://www.sdmsoftware.com/blog
Group Policy on Twitter:
http://www.twitter.com/grouppolicyguy
***********
Need to compare GPO settings? Get the SDM Software GPO Compare tool-- http://www.sdmsoftware.com/group_policy_compare
***********


"markd" <markd@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:E4DC2090-B550-45BC-A891-CFC0F038417A@xxxxxxxxxxxxxxxx
Hi,

I'd like to apply local group policy to a number of machines that are not
domain members. Specifically, I have all domain members getting updates
through WSUS and now I need to implement the same configuration on a number
of stand-alone servers. I'd prefer the local group policy method to manually
setting the registry values.

Is there a way to easily export the local group policy settings from one
machine and import it into another?

.

Relevant Pages

  • Re: Group Policy to Users Except Admins
    ... There most certainly is a local GPO on every Win2K and above box. ... The Local Security Settings tool that you get within the ... Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub: ... >> all users except administrators. ...
    (microsoft.public.windows.group_policy)
  • Re: Two part Group Policy question
    ... It just means that the computer and user will ignore the local GPO. ... I have a script on my website that is designed to disable the local GPO via computer startup script. ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... There is no "switch" to throw that disables GP. ...
    (microsoft.public.windows.group_policy)
  • Re: Using GP on a standalone XP machine for specific users
    ... Having AD buys you flexibility for targeting different user groups. ... you're stuck with the local GPO. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool athttp://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)
  • Re: export/import local group policy?
    ... There is no way to export a local GPO. ... Powershell to write scripts that can modify domain or local GPO settings ... Group Policy Blog: http://www.sdmsoftware.com/blog ... What about using export in the Local Security Policy editor and then apply ...
    (microsoft.public.windows.group_policy)
  • Re: Gpedit.msc, list only configured settings
    ... I assume that you want this for the local GPO? ... Have you looked into the Group Policy Management Console? ... How can i get a list of only configured settings of a group policy object? ...
    (microsoft.public.windows.server.active_directory)