Announcement

Collapse
No announcement yet.

possible to inherit group policy without server?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • possible to inherit group policy without server?

    Hi,
    We have about 10 pcs in our company. Is there any ways that we can inherit (import/export) one pc's' group policy to another one? We don't have a server install in our company.

    Would writing a script in batch that export to registry be efficient enough to manage group policy? If so, can anyone guide me?


    Thanks.

  • #2
    Re: possible to inherit group policy without server?

    AFAIK, no. sorry.

    Comment


    • #3
      Re: possible to inherit group policy without server?

      You need to test it however copy the folder C:\WINDOWS\system32\GroupPolicy from one to an other system.
      reboot the system and I thought you're done.
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: possible to inherit group policy without server?

        Dumber is right. Only before you do that, go into the local GP, change something, get out.
        That will create the initial GP settings and make the system notice them. after that copying over the files might help.

        I saw a .reg repository online somewhere, using those ready scripts is even better
        ________
        Dexter Dicussion
        Last edited by DYasny; 6th March 2011, 18:19.
        Real stupidity always beats Artificial Intelligence (c) Terry Pratchett

        BA (BM), RHCE, MCSE, DCSE, Linux+, Network+

        Comment


        • #5
          Re: possible to inherit group policy without server?

          Hai all

          Many thanks Dumper i tried this method and it is working.

          You can do the below given step to apply GPO for a particular user logging in to the Desktop which is not joined to the Domain

          1. create two users named sample1 and sample2
          2. login to administrator
          3. navigate to c:\windows\system32\group policy folder
          4. go to the properties and select security tab. In th ACL add the two user ids (sample1 and sample2)
          5. In the Access control entry give the necessary permission to the users, say while the sample1 users logs in the GPO should be applied while sample2 user logs in GPO should not be applied
          6. in that case give deny read,write and modify permission for sample2 and administrator users and give full control permission to the sample1 user in the access control entry list
          7. then login as saple1 and go to group policy folder and copy the applied GPO to the exixting one and execute the GPUPDATE command
          8. Now logoff and login again as sample1 user GPO will applied to the use and when you login as sample2 user and administrator GPO will not be applied

          Hope this will be helpfull

          Regards
          Balaji

          Have a greate day

          Comment


          • #6
            Re: possible to inherit group policy without server?

            Of course you need to set the ACL's in place
            I've done it quite a few years ago, and while I was busy I've locked myself out
            So I needed to start over again.

            I wasn't sure if the copy procedure was enough due to the all those years.
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment

            Working...
            X