locked
Local Group Policy files RRS feed

  • Question

  • We are a trading firm and have a number of Windows 2008 R2 servers that are not part of our domain.  We want to control policies on these machines without adding them to our domain.  We can not add them to the domain for performance reasons as we reserve ALL processing power for trading applications.  

    As I understand it, the Registry.pol file is the local policy?  If so, which one of these on the server is the policy being loaded? Also, is it possible to copy a new.pol file from a network share to implement new policy?

     

    Thanks!

    Tony

    Wednesday, September 14, 2011 7:53 PM

Answers

  • Hi,

    You can try the below steps for copying the policies from one server to other. Configure the policy on one server and then copy it over to rest of the servers

    1.) Open %systemroot%\system32\grouppolicy\

    Within this folder, there are two folders - “machine” and “user”. Copy these to folders to the “%systemroot%\system32\grouppolicy - folder on the target machine.
    Restart the machine or run GPUPDATE /force

    Note :- %systemroot%\system32\grouppolicy is a hidden folder. You need to set an option to view hidden folder in explorer.

    2) Use Security Configuration Tool 
        Refer following link..
         http://technet.microsoft.com/en-us/library/bb742512.aspx

    Thank You.

    • Proposed as answer by Yan Li_ Thursday, September 15, 2011 7:56 AM
    • Marked as answer by TonyL1234 Friday, September 16, 2011 2:22 PM
    Thursday, September 15, 2011 4:30 AM
  • Hi,

     Local group policy is contained in the folder C:\windows\system32\grouppolicy. You would need to copy the entire folder to ensure that it works correctly. The best way to create is to configure the settings on a reference machine and then copy the entire folder to the network and then to other systems.

     

    Thanks,

    Guy

    • Proposed as answer by Yan Li_ Thursday, September 15, 2011 6:09 AM
    • Marked as answer by TonyL1234 Friday, September 16, 2011 2:22 PM
    Wednesday, September 14, 2011 8:40 PM

All replies

  • Hi,

     Local group policy is contained in the folder C:\windows\system32\grouppolicy. You would need to copy the entire folder to ensure that it works correctly. The best way to create is to configure the settings on a reference machine and then copy the entire folder to the network and then to other systems.

     

    Thanks,

    Guy

    • Proposed as answer by Yan Li_ Thursday, September 15, 2011 6:09 AM
    • Marked as answer by TonyL1234 Friday, September 16, 2011 2:22 PM
    Wednesday, September 14, 2011 8:40 PM
  • Hi,

    You can try the below steps for copying the policies from one server to other. Configure the policy on one server and then copy it over to rest of the servers

    1.) Open %systemroot%\system32\grouppolicy\

    Within this folder, there are two folders - “machine” and “user”. Copy these to folders to the “%systemroot%\system32\grouppolicy - folder on the target machine.
    Restart the machine or run GPUPDATE /force

    Note :- %systemroot%\system32\grouppolicy is a hidden folder. You need to set an option to view hidden folder in explorer.

    2) Use Security Configuration Tool 
        Refer following link..
         http://technet.microsoft.com/en-us/library/bb742512.aspx

    Thank You.

    • Proposed as answer by Yan Li_ Thursday, September 15, 2011 7:56 AM
    • Marked as answer by TonyL1234 Friday, September 16, 2011 2:22 PM
    Thursday, September 15, 2011 4:30 AM
  • Thanks!
    Friday, September 16, 2011 2:22 PM