[gptalk] Re: Merging actual applied settings of different policies into one policy.

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Fri, 2 Mar 2007 07:48:54 -0800

Yes, I'm very familiar with ActiveRoles--I was CTO of Windows products at
Quest until last April. ActivePolicies basically lets you create a template
of policy settings and then link that to a live GPO. However, it does not
support all policy settings and I don't think you can merge multiple APs
into a single GPO. And, as you mention John, ActiveRoles the product is
quite a bit of money, simply because the ActivePolicies piece is only a
small part of what it does. 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of jfvanmeter@xxxxxxxxxxx
Sent: Friday, March 02, 2007 7:43 AM
To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
Cc: Darren Mar-Elia
Subject: [gptalk] Re: Merging actual applied settings of different policies
into one policy.

There is a software suite called Active Roles / Active Policies made by
Quest software that will allow you to create a single active policy that
contains group policy settings then link that active policy to multiple
GPOs.
Like most software, its somewhat expensive

Take Care --John

 -------------- Original message ----------------------
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
> Ah, right--no you can't do that either :). The export of that report is
just
> HTML or XML and doesn't import back into a GPO. What you're after is
> effectively what I described, which is that you want to merge multiple
GPOs'
> settings into a single one, for which there is no solution short of coding
> it yourself (and its not trivial).
> 
> 
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of victor-w@xxxxxxxxx
> Sent: Thursday, March 01, 2007 11:57 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Merging actual applied settings of different
policies
> into one policy.
> 
> After reading my initial post again I am now thinking I could have 
> described it better.
> 
> What I actually mean is; After running Group Policy Modeling, it gives 
> me a report with all the applied settings in it.  Can I export these 
> settings and import them into another GPO?
> 
> Cheers,
> 
> 
> VIctor
> 
> ----- Oorspronkelijk bericht -----
> Van: Darren Mar-Elia <darren@xxxxxxxxxx>
> Datum: donderdag, maart 1, 2007 11:28 pm
> Onderwerp: [gptalk] Re: Merging actual applied settings of different 
> policies into one policy.
> 
> > Victor-
> > 
> > If you need to merge settings from, let's say, two sets of 
> > AdministrativeTemplate policies, then there is no way to do that 
> > without lots of
> > programming.  If you want to take, say, IE maintenance policy from 
> > one GPO
> > and put it into another one, then that is a little more do-able. 
> > Let me know
> > which your situation is.
> > 
> > 
> > 
> > Darren
> > 
> > 
> > 
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-
> > bounce@xxxxxxxxxxxxx] On
> > Behalf Of Victor W.
> > Sent: Thursday, March 01, 2007 2:17 PM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Merging actual applied settings of different 
> > policies into
> > one policy.
> > 
> > 
> > 
> > We are building a GPO for a kiosk machine.
> > 
> > This should be a GPO which totally locks down the machine. The machine
> > should automatically logon with a standard (kiosk) user and Internet
> > Explorer opened in full screen (as the only application available).
> > 
> > 
> > 
> > I stumbled on to the following article and the accompanying appendix:
> > 
> > 
> > 
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> > 
> > 
> > 
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> > 
> > 
> > 
> > We started testing the above in our test lab. The script that 
> > comes with it
> > creates an OU structure and GPO's linked to them. I am now at home 
> > but if I
> > recall correctly there are infact 3 GPO's that actually apply to 
> > the kiosk
> > machine/user (in a certain order of precedence).
> > 
> > 
> > 
> > We used group policy modeling to create a report containing the 
> > settingsthat would actually be applied.  
> > 
> > 
> > 
> > We would very much like to create (only) 1 GPO, to use in production,
> > containing these settings. Is there a way to do this? We have 
> > tried the
> > "import settings" feature but this overwrites all other settings 
> > and besides
> > that it is of no real use because it of course doesn't do anything 
> > with the
> > settings that actually apply (taken into account inheritance and 
> > precedenceetcetera).
> > 
> > 
> > 
> > Cheers,
> > 
> > 
> > 
> > 
> > 
> > Victor
> > 
> > 
> > 
> > 
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
> ************************
> 
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx 
> with 'unsubscribe' in the Subject field OR by logging into the
freelists.org Web 
> interface. Archives for the list are available at 
> http://www.freelists.org/archives/gptalk/
> ************************

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: