Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » A Way to Export Local Policy?
A Way to Export Local Policy? [message #156336] Mon, 15 June 2009 11:25 Go to next message
Charles  is currently offline Charles
Messages: 71
Registered: July 2009
Member
Hi:

Is there a way to save off the policies set for a system? We have a system
in the AD that has policies set that were not set via AD GPOs. Also have a
system not in a domain that we want to make a copy of the policies so we can
import them some way into a GPO that can be applied to other systems.

Thanks,
Charles
Re: A Way to Export Local Policy? [message #156346 is a reply to message #156336] Mon, 15 June 2009 15:53 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Charles schrieb:
> Is there a way to save off the policies set for a system? We have a system
> in the AD that has policies set that were not set via AD GPOs. Also have a
> system not in a domain that we want to make a copy of the policies so we can
> import them some way into a GPO that can be applied to other systems.

Yeah, you can basically copy the machine-local "GroupPolicy" in the
system32 folder. It might be hidden, so you probably need to tweak the
folder options in Windows Explorer.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: A Way to Export Local Policy? [message #156353 is a reply to message #156346] Mon, 15 June 2009 17:18 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
In addition to advice from Florian, you could use secedit command line
utility to export/import security portion of local Group Policy...

hth
Marcin

"Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
message news:eG9A5Mf7JHA.1420@TK2MSFTNGP04.phx.gbl...
> Howdie!
>
> Charles schrieb:
>> Is there a way to save off the policies set for a system? We have a
>> system in the AD that has policies set that were not set via AD GPOs.
>> Also have a system not in a domain that we want to make a copy of the
>> policies so we can import them some way into a GPO that can be applied to
>> other systems.
>
> Yeah, you can basically copy the machine-local "GroupPolicy" in the
> system32 folder. It might be hidden, so you probably need to tweak the
> folder options in Windows Explorer.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: A Way to Export Local Policy? [message #156360 is a reply to message #156353] Mon, 15 June 2009 20:06 Go to previous messageGo to next message
Charles  is currently offline Charles
Messages: 71
Registered: July 2009
Member
Thanks to the both of you! Isn't it a security concern if we are able to
copy the win\system32\grouppolicy folder from one machine and put it on
another machine? Not sure, just asking.

Thanks,
Charles

"Marcin" wrote:

> In addition to advice from Florian, you could use secedit command line
> utility to export/import security portion of local Group Policy...
>
> hth
> Marcin
>
> "Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
> message news:eG9A5Mf7JHA.1420@TK2MSFTNGP04.phx.gbl...
> > Howdie!
> >
> > Charles schrieb:
> >> Is there a way to save off the policies set for a system? We have a
> >> system in the AD that has policies set that were not set via AD GPOs.
> >> Also have a system not in a domain that we want to make a copy of the
> >> policies so we can import them some way into a GPO that can be applied to
> >> other systems.
> >
> > Yeah, you can basically copy the machine-local "GroupPolicy" in the
> > system32 folder. It might be hidden, so you probably need to tweak the
> > folder options in Windows Explorer.
> >
> > Cheers,
> > Florian
> > --
> > Microsoft MVP - Group Policy
> > eMail: prename [at] frickelsoft [dot] net.
> > blog: http://www.frickelsoft.net/blog.
> > Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>
>
>
Re: A Way to Export Local Policy? [message #156366 is a reply to message #156360] Tue, 16 June 2009 01:57 Go to previous message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Charles,

Charles schrieb:
> Thanks to the both of you! Isn't it a security concern if we are able to
> copy the win\system32\grouppolicy folder from one machine and put it on
> another machine? Not sure, just asking.

Why should that be a security concern? Since it's in system32, not
anyone is allowed to write into the folder.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Previous Topic:DC Not Accepting Any Replications from Partners
Next Topic:subinacl to remove unknown sids
Goto Forum:
  


Current Time: Fri Oct 20 02:57:23 EDT 2017

Total time taken to generate the page: 0.02868 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software