[gptalk] Re: Exporting the local gpo settings
- From: "Piet Slaghekke" <pslaghekke@xxxxxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Wed, 6 Jun 2007 01:24:52 -0400
Thanks Alan and Darren!
So I can't use a gpupdate command on the new computer to update the policy
settings, right?
When I change the number in gpt.ini do I have to reboot the computer for
settings to take effect?
As for the security settings, are these also configured in the local GPO?
How do I export the local security settings?
Do you all know where I can find a list of which settings are stored in the
registry.pol files and which settings are stored in the security templates?
Thanks!
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Tue 6/5/2007 11:26 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Exporting the local gpo settings
Alan is correct although security policy cannot be copied because it is not
held in the file system, but rather made directly against the machine's local
SAM. However, you can always create a security template to capture that and
apply it to subsequent machines.
Also, if you simply copy all of the contents of that folder from one machine to
another, you have to keep in mind the version number held in the gpt.ini file.
If the version number is, for example, the same on the source as on the target,
then the target will not notice the new settings until something has changed.
Also, I'll just mention it as a plug here-as some of you know-I've built SDM
Software <http://www.sdmsoftware.com/> as a company to build and sell Group
Policy products, and one of the tools that will be out shortly is the GPExpert
Scripting Toolkit. The Scripting Toolkit is essentially a Powershell scripting
interface into Group Policy settings so that you can essentially script changes
to GPOs. The toolkit will support local GPOs and using it, you will be able to
create a script that essentially allows you to "copy" GPO settings to multiple
machines local GPOs.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Alan & Margaret
Sent: Tuesday, June 05, 2007 6:37 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Exporting the local gpo settings
Hi Piet,
There is a directory called C:\WINDOWS\system32\GroupPolicy which should
contain all of the info. I have never tried it, but I assume that copying that
directory to the target machine would have the desired effect
Alan Cuthbertson
Policy Management Software:-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor:-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Piet Slaghekke
Sent: Wednesday, 6 June 2007 8:12 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Exporting the local gpo settings
Hello everyone,
I have a computer on a samba domain. I want to export the local gpo
settings so I can import them to another computer.
How can I do this?
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
