Export Group Policy Settings

[spiritussanctus]

Hello,

I have 100 workstations running Windows XP Pro in a Workgroup, not in a domain. I must deny access of regular users to some applications and resources. I made this on 1 PC through Global Policy Editor (gpedit.msc). Is there any way to export those settings and import them on every PC in my Workgroup, not to editting manualy on every PC ?

Thanks a lot

 

[gpalmer711]

There is a way you can define a template on one machine, save it to a inf file and then apply that on each machine. I have provided the instructions below on how to create the template, if you would like me to design a template for you let me know and I will do this for you.

Click on Start > Run > type MMC > Click OK

Click on File > Add/Remove Snap in > Click Add > Click Security Templates > Click Close > Click OK

Right Click on "Setup Security" > Click on Save As > Enter a new name > Click OK

Now you can click on the plus symbol next to your new file and define the policies/reg edits etc for your policy. Once you have finished Right Click on your file name and select save.

To apply the policy set that you have just created do the following on each machine.

Click on Start > Run > type MMC > Click OK

Click on File > Add/Remove Snap in > Click Add > Click Security Configuration and Analysis > Click Close > Click OK

Right Click on Security Configuration and Analysis and select "Open Database"

Type in a new name and click OK

Now browse for the inf file that you created in the steps above. It would be better if there was a copy of this file stored on the local machines. Preferably in the c:\windows\security\templates folder

Right Click on Security Configuration and Analysis and select "Configure Computer" > Select a Log File name and click on OK.

Once this is finished restart the machine and your new security settings will be in place.

Greg Palmer
Freeware Utilities for Windows Administrators.

http://www.palmersoft.co.uk

 

[spiritussanctus]

ok, Thanks for response.

But with this method i cannot deny acces to specific applications or drives, for example. Must I design another template for this ?

Thanks

 

[gpalmer711]

For this you would use the file system section. Here you can set the file access settings to restricy specific users from accessing the files and/or folders.

Greg Palmer
Freeware Utilities for Windows Administrators.

http://www.palmersoft.co.uk

 

[spiritussanctus]

Ok, I understood

Thanks a lot for your help


Radu