[gptalk] Re: exporting group policy to security templates (inf files)

Strange. I had originally tried this on a local GPO and it worked just fine
but now testing this against my domain environment, my GPOs are greyed-out
as well. So, here's an alternative. The actual .inf file that is stored in
SYSVOL for that GPO is just the same format that secedit uses. So, for a
given GPO, simply go into the
\\<domain>\sysvol\<domain>\policies\<GPOGUID>\Machine\Microsoft\Windows
NT\SecEdit folder and copy the gpttmpl.inf to wherever you need it.

 

Darren

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of DSalmon@xxxxxxxxxxxxxxxx
Sent: Thursday, May 17, 2007 11:00 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: exporting group policy to security templates (inf
files)

 

Yes there are.  I have tried it in multiple domains now and the results are
the same across the board.

 

Dan

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, May 16, 2007 2:00 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: exporting group policy to security templates (inf
files)

 

Are there actually security settings defined within the GPOs?

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of DSalmon@xxxxxxxxxxxxxxxx
Sent: Wednesday, May 16, 2007 11:55 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: exporting group policy to security templates (inf
files)

 

Logged in as domain admin and the setting is greyed out.  I have verified
the security on the gp and all is set to the default.  I have even tried
this on the PDC emulator.

 

Same on all group policies in the domain.  Ideas or something I am missing?

 

Dan

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, May 16, 2007 1:46 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: exporting group policy to security templates (inf
files)

 

Sure! Right-click Security Settings node within GPEditor and choose Export
Policy. That exports the current settings in the GPO to a .inf file that can
be consumed by Secedit.

 

Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of DSalmon@xxxxxxxxxxxxxxxx
Sent: Wednesday, May 16, 2007 11:40 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] exporting group policy to security templates (inf files)

 

I have been searching high and low and need a little help.  Is there a way
to export an existing group policy to a security template so it can be used
with security configuration and analysis?

 

Thanks

Dan

Other related posts: