none
Security Restriction Policies

    Question

  • I have a windows 2012 server, but Windows 7 professional environment for a client. I need to deploy Software restriction policies since Applocker isn't an option on the local PC's. How can I export the SRP I create on a local PC to the server, so that I can create and deploy a GPO?
    Sunday, December 04, 2016 10:00 PM

All replies

  • Hi Jay,

    As far as I know, SRP does not support policy import/export.

    Here is an article below for your reference.

    Software Restriction Policies Technical Overview

    https://technet.microsoft.com/en-us/library/hh994620(v=ws.11).aspx

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, December 05, 2016 2:36 AM
    Moderator
  •  
    Am 04.12.2016 um 23:00 schrieb Courtney Jay:
    > I have a windows 2012 server, but Windows 7 professional environment
    >  for a client. I need to deploy Software restriction policies
     
    Where is your problem, thats what Domain policies are made for, create
    GPO, link it to the OU of your computers, done.
    Or are your clients member of a workgroup?
     
    Workgroup:
    SRP are stored in registry.pol, like AdminTemplate Settings.
     
    - create a Domain GPO, only containing SRP! nothing else
    - create a L-GPO without anything but create an empty SRP policy, by
    "right click" create within gpedit.msc
     
    now you have a valid gpt.ini in c:\windows\system32\grouppolicy which
    can be copied to every machine to this folder.
    Replace c:\windows\system32\grouppolicy\machine\registry.pol with the
    one from the domain, where you configure SRP.
     
    copy gpt.ini and registry.pol to every desired client and run a gpupdate
    /force or raise the version to a high number, then /force is not needed.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, December 05, 2016 7:30 AM
  • Hi,

    Are there any updates?

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, December 12, 2016 5:19 AM
    Moderator