[gptalk] Re: Merging actual applied settings of different policies into one policy.
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Fri, 2 Mar 2007 07:48:54 -0800
Yes, I'm very familiar with ActiveRoles--I was CTO of Windows products at
Quest until last April. ActivePolicies basically lets you create a template
of policy settings and then link that to a live GPO. However, it does not
support all policy settings and I don't think you can merge multiple APs
into a single GPO. And, as you mention John, ActiveRoles the product is
quite a bit of money, simply because the ActivePolicies piece is only a
small part of what it does.
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of jfvanmeter@xxxxxxxxxxx
Sent: Friday, March 02, 2007 7:43 AM
To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
Cc: Darren Mar-Elia
Subject: [gptalk] Re: Merging actual applied settings of different policies
into one policy.
There is a software suite called Active Roles / Active Policies made by
Quest software that will allow you to create a single active policy that
contains group policy settings then link that active policy to multiple
GPOs.
Like most software, its somewhat expensive
Take Care --John
-------------- Original message ----------------------
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
> Ah, right--no you can't do that either :). The export of that report is
just
> HTML or XML and doesn't import back into a GPO. What you're after is
> effectively what I described, which is that you want to merge multiple
GPOs'
> settings into a single one, for which there is no solution short of coding
> it yourself (and its not trivial).
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of victor-w@xxxxxxxxx
> Sent: Thursday, March 01, 2007 11:57 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Merging actual applied settings of different
policies
> into one policy.
>
> After reading my initial post again I am now thinking I could have
> described it better.
>
> What I actually mean is; After running Group Policy Modeling, it gives
> me a report with all the applied settings in it. Can I export these
> settings and import them into another GPO?
>
> Cheers,
>
>
> VIctor
>
> ----- Oorspronkelijk bericht -----
> Van: Darren Mar-Elia <darren@xxxxxxxxxx>
> Datum: donderdag, maart 1, 2007 11:28 pm
> Onderwerp: [gptalk] Re: Merging actual applied settings of different
> policies into one policy.
>
> > Victor-
> >
> > If you need to merge settings from, let's say, two sets of
> > AdministrativeTemplate policies, then there is no way to do that
> > without lots of
> > programming. If you want to take, say, IE maintenance policy from
> > one GPO
> > and put it into another one, then that is a little more do-able.
> > Let me know
> > which your situation is.
> >
> >
> >
> > Darren
> >
> >
> >
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-
> > bounce@xxxxxxxxxxxxx] On
> > Behalf Of Victor W.
> > Sent: Thursday, March 01, 2007 2:17 PM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Merging actual applied settings of different
> > policies into
> > one policy.
> >
> >
> >
> > We are building a GPO for a kiosk machine.
> >
> > This should be a GPO which totally locks down the machine. The machine
> > should automatically logon with a standard (kiosk) user and Internet
> > Explorer opened in full screen (as the only application available).
> >
> >
> >
> > I stumbled on to the following article and the accompanying appendix:
> >
> >
> >
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> >
> >
> >
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> >
> >
> >
> > We started testing the above in our test lab. The script that
> > comes with it
> > creates an OU structure and GPO's linked to them. I am now at home
> > but if I
> > recall correctly there are infact 3 GPO's that actually apply to
> > the kiosk
> > machine/user (in a certain order of precedence).
> >
> >
> >
> > We used group policy modeling to create a report containing the
> > settingsthat would actually be applied.
> >
> >
> >
> > We would very much like to create (only) 1 GPO, to use in production,
> > containing these settings. Is there a way to do this? We have
> > tried the
> > "import settings" feature but this overwrites all other settings
> > and besides
> > that it is of no real use because it of course doesn't do anything
> > with the
> > settings that actually apply (taken into account inheritance and
> > precedenceetcetera).
> >
> >
> >
> > Cheers,
> >
> >
> >
> >
> >
> > Victor
> >
> >
> >
> >
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx
> with 'unsubscribe' in the Subject field OR by logging into the
freelists.org Web
> interface. Archives for the list are available at
> //www.freelists.org/archives/gptalk/
> ************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
