Strange. I had originally tried this on a local GPO and it worked just fine but now testing this against my domain environment, my GPOs are greyed-out as well. So, here's an alternative. The actual .inf file that is stored in SYSVOL for that GPO is just the same format that secedit uses. So, for a given GPO, simply go into the \\<domain>\sysvol\<domain>\policies\<GPOGUID>\Machine\Microsoft\Windows NT\SecEdit folder and copy the gpttmpl.inf to wherever you need it. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of DSalmon@xxxxxxxxxxxxxxxx Sent: Thursday, May 17, 2007 11:00 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: exporting group policy to security templates (inf files) Yes there are. I have tried it in multiple domains now and the results are the same across the board. Dan From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Wednesday, May 16, 2007 2:00 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: exporting group policy to security templates (inf files) Are there actually security settings defined within the GPOs? From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of DSalmon@xxxxxxxxxxxxxxxx Sent: Wednesday, May 16, 2007 11:55 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: exporting group policy to security templates (inf files) Logged in as domain admin and the setting is greyed out. I have verified the security on the gp and all is set to the default. I have even tried this on the PDC emulator. Same on all group policies in the domain. Ideas or something I am missing? Dan From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Wednesday, May 16, 2007 1:46 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: exporting group policy to security templates (inf files) Sure! Right-click Security Settings node within GPEditor and choose Export Policy. That exports the current settings in the GPO to a .inf file that can be consumed by Secedit. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of DSalmon@xxxxxxxxxxxxxxxx Sent: Wednesday, May 16, 2007 11:40 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] exporting group policy to security templates (inf files) I have been searching high and low and need a little help. Is there a way to export an existing group policy to a security template so it can be used with security configuration and analysis? Thanks Dan