[gptalk] Re: Exporting the local gpo settings

  • From: "Piet Slaghekke" <pslaghekke@xxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 6 Jun 2007 01:24:52 -0400

Thanks Alan and Darren! 
So I can't use a gpupdate command on the new computer to update the policy 
settings, right?
When I change the number in gpt.ini do I have to reboot the computer for 
settings to take effect?  
As for the security settings, are these also configured in the local GPO?
How do I export the local security settings?
Do you all know where I can find a list of which settings are stored in the  
registry.pol files and which settings are stored in the security templates?


From: gptalk-bounce@xxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Tue 6/5/2007 11:26 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Exporting the local gpo settings

Alan is correct although security policy cannot be copied because it is not 
held in the file system, but rather made directly against the machine's local 
SAM. However, you can always create a security template to capture that and 
apply it to subsequent machines.


Also, if you simply copy all of the contents of that folder from one machine to 
another, you have to keep in mind the version number held in the gpt.ini file. 
If the version number is, for example, the same on the source as on the target, 
then the target will not notice the new settings until something has changed. 


Also, I'll just mention it as a plug here-as some of you know-I've built SDM 
Software <http://www.sdmsoftware.com/>  as a company to build and sell Group 
Policy products, and one of the tools that will be out shortly is the GPExpert 
Scripting Toolkit. The Scripting Toolkit is essentially a Powershell scripting 
interface into Group Policy settings so that you can essentially script changes 
to GPOs. The toolkit will support local GPOs and using it, you will be able to 
create a script that essentially allows you to "copy" GPO settings to multiple 
machines local GPOs.




From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Alan & Margaret
Sent: Tuesday, June 05, 2007 6:37 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Exporting the local gpo settings


Hi Piet,


There is a directory called C:\WINDOWS\system32\GroupPolicy which should 
contain all of the info. I have never tried it, but I assume that copying that 
directory to the target machine would have the desired effect


Alan Cuthbertson



 Policy Management Software:-



ADM Template Editor:-



Policy Log Reporter(Free)






-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Piet Slaghekke
Sent: Wednesday, 6 June 2007 8:12 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Exporting the local gpo settings


Hello everyone,  


I have a computer on a samba domain.  I want to export the local gpo

settings so I can import them to another computer.

How can I do this? 





You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/


Other related posts: