[gptalk] Re: Merging actual applied settings of different policies into one policy.
- From: "Victor W." <victor-w@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Sat, 03 Mar 2007 21:48:43 +0100
Thanks for this, Darren and John.
Your input is greatly appreciated. I will check out if ActivePolicies comes
close to what we are looking for. I will also do some additional
investigation into coding it.
Since we until now have only run into this situation once, it would probably
be easier and faster to just create a GPO and manually add all the settings
from the Group Policy Modeling report to it, even though we are talking
about 20 pages of settings we would have to add to that GPO ;-). If in the
future we would run into the same issue, we would surely think about
purchasing a tool for it or trying to code it ourselves.
Cheers,
Victor
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Friday, March 02, 2007 4:49 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Merging actual applied settings of different policies
into one policy.
Yes, I'm very familiar with ActiveRoles--I was CTO of Windows products at
Quest until last April. ActivePolicies basically lets you create a template
of policy settings and then link that to a live GPO. However, it does not
support all policy settings and I don't think you can merge multiple APs
into a single GPO. And, as you mention John, ActiveRoles the product is
quite a bit of money, simply because the ActivePolicies piece is only a
small part of what it does.
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of jfvanmeter@xxxxxxxxxxx
Sent: Friday, March 02, 2007 7:43 AM
To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
Cc: Darren Mar-Elia
Subject: [gptalk] Re: Merging actual applied settings of different policies
into one policy.
There is a software suite called Active Roles / Active Policies made by
Quest software that will allow you to create a single active policy that
contains group policy settings then link that active policy to multiple
GPOs.
Like most software, its somewhat expensive
Take Care --John
-------------- Original message ----------------------
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
> Ah, right--no you can't do that either :). The export of that report is
just
> HTML or XML and doesn't import back into a GPO. What you're after is
> effectively what I described, which is that you want to merge multiple
GPOs'
> settings into a single one, for which there is no solution short of coding
> it yourself (and its not trivial).
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of victor-w@xxxxxxxxx
> Sent: Thursday, March 01, 2007 11:57 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Merging actual applied settings of different
policies
> into one policy.
>
> After reading my initial post again I am now thinking I could have
> described it better.
>
> What I actually mean is; After running Group Policy Modeling, it gives
> me a report with all the applied settings in it. Can I export these
> settings and import them into another GPO?
>
> Cheers,
>
>
> VIctor
>
> ----- Oorspronkelijk bericht -----
> Van: Darren Mar-Elia <darren@xxxxxxxxxx>
> Datum: donderdag, maart 1, 2007 11:28 pm
> Onderwerp: [gptalk] Re: Merging actual applied settings of different
> policies into one policy.
>
> > Victor-
> >
> > If you need to merge settings from, let's say, two sets of
> > AdministrativeTemplate policies, then there is no way to do that
> > without lots of
> > programming. If you want to take, say, IE maintenance policy from
> > one GPO
> > and put it into another one, then that is a little more do-able.
> > Let me know
> > which your situation is.
> >
> >
> >
> > Darren
> >
> >
> >
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-
> > bounce@xxxxxxxxxxxxx] On
> > Behalf Of Victor W.
> > Sent: Thursday, March 01, 2007 2:17 PM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Merging actual applied settings of different
> > policies into
> > one policy.
> >
> >
> >
> > We are building a GPO for a kiosk machine.
> >
> > This should be a GPO which totally locks down the machine. The machine
> > should automatically logon with a standard (kiosk) user and Internet
> > Explorer opened in full screen (as the only application available).
> >
> >
> >
> > I stumbled on to the following article and the accompanying appendix:
> >
> >
> >
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> >
> >
> >
> > http://technet2.microsoft.com/WindowsServer/en/library/6dcc3ce3-
> > 667d-44fb-97
> > 2b-799ac1f26bcd1033.mspx?mfr=true
> >
> >
> >
> > We started testing the above in our test lab. The script that
> > comes with it
> > creates an OU structure and GPO's linked to them. I am now at home
> > but if I
> > recall correctly there are infact 3 GPO's that actually apply to
> > the kiosk
> > machine/user (in a certain order of precedence).
> >
> >
> >
> > We used group policy modeling to create a report containing the
> > settingsthat would actually be applied.
> >
> >
> >
> > We would very much like to create (only) 1 GPO, to use in production,
> > containing these settings. Is there a way to do this? We have
> > tried the
> > "import settings" feature but this overwrites all other settings
> > and besides
> > that it is of no real use because it of course doesn't do anything
> > with the
> > settings that actually apply (taken into account inheritance and
> > precedenceetcetera).
> >
> >
> >
> > Cheers,
> >
> >
> >
> >
> >
> > Victor
> >
> >
> >
> >
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx
> with 'unsubscribe' in the Subject field OR by logging into the
freelists.org Web
> interface. Archives for the list are available at
> //www.freelists.org/archives/gptalk/
> ************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
