Re: Transferring local computer policy

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/13/04 

Date: Mon, 12 Jul 2004 23:25:29 -0700

Correct, the scope of the export is limited, and, it also
seems broken recently.

What you likely need to do is to look at
1. defining a security template, using the two snapins
    Security Templates, and Security Configuration and
   Analysis. The templates are just files that you can then
   copy to and apply on any machine (using either the second
   of these two snap-ins, or with secedit)
2. editing the adm files of interest to have the settings as
    desired, rather than their defaults as shipped, and then
    using the import capability of the Group Policy snapin
    which you will find in the context (r-click) menu of the
   Administrative templates node. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<anonymous@discussions.microsoft.com> wrote in message
news:2c11601c4685a$29ac2770$a301280a@phx.gbl...
> I had found the secedit command before. When I have read
> up on what it does, it seems to only apply to the security
> policy and not the group policy. I am looking to transfer
> the set of policies that contains, for example, "User
> cannot change wallpaper" and "Disable personalized menus".
> The secedit command doesn't look like it works on those
> policies. Or, am I reading it wrong?
> >-----Original Message-----
> >i Richard,
> >
> >yes, it is possible to transfer settings. My
> recommendation is to look at
> >
> >secedit /? > secedit commands
> >
> >Look under:
> >* secedit /export
> >* secedit /configure
> >
> >I hope this helps you out,
> >
> >Mike
> >
> >"Richard" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:2b43101c4684f$f89cd7b0$a501280a@phx.gbl...
> >> I am the tech for a Boys & Girls Club. We received a
> very
> >> generous software donation from Microsoft. I am
> beginning
> >> the process of installing Windows XP across all of our
> >> Learning Center computers.
> >>
> >> My question: Is there a way to automatically set the
> Local
> >> Computer Policy? I currently have to enable/disable all
> >> the settings we want to use by hand on every computer.
> It
> >> is time-consuming and error-prone. I would much rather
> >> have an automated method to ensure that the settings are
> >> consistent across all our learning center computers.
> >>
> >> Note: I do not have a server of any sort available. Just
> >> workstations running XP Pro.
> >
> >
> >.
> >

Relevant Pages

  • RE: Network and information security question
    ... All the computers have to be Pro. ... detaching the home versions from the network and making them work outside the ... configurations you can use group policy to manage the employee computers, ... tighten security. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 0x80070005 error on multiple computers
    ... The computers have standard ... I am getting the error code 0x80070005 on about ... Usually it's caused by security ... software, Group Policy setting, incorrect Permissions, or malware. ...
    (microsoft.public.windowsupdate)
  • Re: Exchange OWA 2003 Trusted Root Certificate
    ... Domain level GPO called Mail, ... Security to Apply, can I add the machines to the same User Group and then ... On the second method - just to clarify, if I already have my computers ... > that you want the Group Policy computer configuration to apply to. ...
    (microsoft.public.win2000.security)
  • Re: SFS Problem
    ... It should be disabled already if your computers are in an Active Directory ... Anyhow you can use Group Policy to manage the security option for ... sharing and security model for local accounts to be ... Is there a setting in group policy to allow me to globaly turn off SFS? ...
    (microsoft.public.windowsxp.security_admin)
  • RE: [Full-Disclosure] Insecurity in Finnish parlament (computers)
    ... > It is unlikely that all the computers have the same security ... > (both in TeliaSonera and in our parlament). ... Red herring. ...
    (Full-Disclosure)