A Way to Export Local Policy?

Hi:

Is there a way to save off the policies set for a system? We have a system
in the AD that has policies set that were not set via AD GPOs. Also have a
system not in a domain that we want to make a copy of the policies so we can
import them some way into a GPO that can be applied to other systems.

Thanks,
Charles

Howdie!

Charles schrieb:
> Is there a way to save off the policies set for a system? We have a system
> in the AD that has policies set that were not set via AD GPOs. Also have a
> system not in a domain that we want to make a copy of the policies so we can
> import them some way into a GPO that can be applied to other systems.

Yeah, you can basically copy the machine-local "GroupPolicy" in the
system32 folder. It might be hidden, so you probably need to tweak the
folder options in Windows Explorer.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

In addition to advice from Florian, you could use secedit command line
utility to export/import security portion of local Group Policy...

hth
Marcin

"Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
message news:eG9A5Mf7JHA.1420@TK2MSFTNGP04.phx.gbl...
> Howdie!
>
> Charles schrieb:
>> Is there a way to save off the policies set for a system? We have a
>> system in the AD that has policies set that were not set via AD GPOs.
>> Also have a system not in a domain that we want to make a copy of the
>> policies so we can import them some way into a GPO that can be applied to
>> other systems.
>
> Yeah, you can basically copy the machine-local "GroupPolicy" in the
> system32 folder. It might be hidden, so you probably need to tweak the
> folder options in Windows Explorer.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Thanks to the both of you! Isn't it a security concern if we are able to
copy the win\system32\grouppolicy folder from one machine and put it on
another machine? Not sure, just asking.

Thanks,
Charles

"Marcin" wrote:

> In addition to advice from Florian, you could use secedit command line
> utility to export/import security portion of local Group Policy...
>
> hth
> Marcin
>
> "Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
> message news:eG9A5Mf7JHA.1420@TK2MSFTNGP04.phx.gbl...
> > Howdie!
> >
> > Charles schrieb:
> >> Is there a way to save off the policies set for a system? We have a
> >> system in the AD that has policies set that were not set via AD GPOs.
> >> Also have a system not in a domain that we want to make a copy of the
> >> policies so we can import them some way into a GPO that can be applied to
> >> other systems.
> >
> > Yeah, you can basically copy the machine-local "GroupPolicy" in the
> > system32 folder. It might be hidden, so you probably need to tweak the
> > folder options in Windows Explorer.
> >
> > Cheers,
> > Florian
> > --
> > Microsoft MVP - Group Policy
> > eMail: prename [at] frickelsoft [dot] net.
> > blog: http://www.frickelsoft.net/blog.
> > Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>
>
>

Charles,

Charles schrieb:
> Thanks to the both of you! Isn't it a security concern if we are able to
> copy the win\system32\grouppolicy folder from one machine and put it on
> another machine? Not sure, just asking.

Why should that be a security concern? Since it's in system32, not
anyone is allowed to write into the folder.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste