Hi…
We have a number of sites that are cloud only, so they do not have a Windows server to communicate to. We’d like to be able to use Group Policies on the PC’s as it makes a lot of things easier.
It would be great if that could happen…
Thanks.
-m
Hello @invisikcorp p,
We have forwarded your query to our Itarian support. One of our Itarian support team member will reach you using your email.
Hi @SethHD,
Could you contact me about this also? This is something that would be super helpful for us.
Many thanks,
Oliver
@invisikcorp , @inspiratechnologygro @SethHD
Several options:
Many Group Policy settings (apart from most of the Security policies) are registry keys, so you can create reg files and deploy via ITarian script procedures using the regmerge command or via batch files.Microsoft reference spreadsheet (with the relevant reg keys) is here: https://www.microsoft.com/en-gb/download/details.aspx?id=25250.
To include those policy items that aren’t registry keys, you can use the secedit.exe command (https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/secedit) to export an existing policy from a source machine and then import (overwrite or merge) it on a target machine.
Finally, there is the command line tool “Local Group Policy Object Utility” (LGPO), part of the “Microsoft Security Compliance Toolkit”. The current version of the tool can be downloaded here: https://www.microsoft.com/en-us/download/details.aspx?id=55319. (The LGPO zip file contains the .exe utility and a PDF usage guide.)
Obviously, all of the above options require RIGOROUS testing before deploying in a production environment.
@invisikcorp @inspiratechnologygro @SethHD
Just found this script which uses secedit to change password settings in local group policy: https://scripts.itarian.com/frontend/web/topic/set-the-local-password-policy-for-windows