none
Editing GPOPack RRS feed

  • Question

  • Hi - How is everybody editing existing GPOPacks?

    I want to use just the localGPO tool so have created a heavily locked down Local Computer Policy on a server disabling User and Computer Configuration settings

    I exported as a GPOPack and applied to MLGPO:Non-Administrators on the servers we need to - all working fine.

    But obviously we may need to edit the GPOPack in the future on a different server and then export the updated version

    As I mentioned it is a heavily locked down policy so once imported to the LGPO it means the Admin user is affected.

    It can be imported to a MLGPO so it won't apply to Admins but then I can not export again from the MLGPO.

    Is there a method to import in to the LGPO in a disabled state or any other suggestions?

    thanks

    Friday, February 19, 2016 4:47 AM

All replies

  • One method would be to edit the GPOPack.wsf script

    In the Sub ConfigureLocalPolicy look for the section where it creates the gpt.ini file:

    objFso.CreatetextFile(strWindir & "\System32\GrouPolicy\gpt.ini")

    add a line:

    objFile.Writeline "Options=3"

    before the line

    objFile.Close

    That sets the two tick boxes for disabling Computer and User Configuration settings when the pack is imported.

    Friday, February 19, 2016 5:43 AM