LocalGPO.msi: Excellent MS Tool

Posted: January 12, 2011 in AD
Tags: , , , , ,

Microsoft Security Compliance Manager download includes the following components:

 

http://www.microsoft.com/Downloads/en/details.aspx?FamilyID=5534bee1-3cad-4bf0-b92b-a8e545573a3e&displaylang=en

  • Microsoft_Security_Compliance_Manager_Setup.exe – The Microsoft Security Compliance Manager allows you to view, update, and export security baselines.
  • LocalGPO.msi This tool is designed to manage local group policies of a computer such as applying a security baseline and exporting the local Group Policy.

==============================

You can use a Microsoft tool called local GPO that I really like as it can do the below activities:

1. It can backup your local GPO to a GPMC formatted backup. Which means you could backup a local GPO and then use GPMC to import it into a domain-based GPO.

2. It can take a GPMC backup of GP settings and import them into a local GPO on a machine.

3. It can restore a local GPO to its default state.

Let’s take a look at how to use each function of this tool,

=================================================================

For backing up the local GPO, the syntax is simple:

From command-line here.cmd (open this cmd from the Local GPO folder), and simply type:

cscript LocalGPO.wsf /path:c:\gpbackups /export

Where c:\gpbackups is a path to where I want to store my backup and /export tells the script to export my local GPO settings.

Now if I want to import a GPMC backup or exported GP object from another stand-alone server into my local GPO, the syntax is even easier. you simply have to  provide the path to the GUID-Named folder that GPMC creates under the backup directory when you back up a GPO, like this:

cscript LocalGPO.wsf /path:C:\gpbackups\{42ADD8FE-EDF6-479B-92C6-557343D8D091}

And, to restore a local GPO to its default config:

cscript LocalGPO.wsf /restore

==================================================================

Hope that the above information help you to complete this task,

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s