General discussion

Locked

Distribute Local GPOs

By IT cowgirl ·
I need to distribute a local GPO created in MMC to all W2K Pro machines on the network. We are running an NT server Domain, so no AD at present.

What would work best? Script? Login script?
Secedit utility or gpupdate utility?
Just copy the files from the Group Policy folder to all W2K desktops??

Any help will be appreciated! We are ostly applying IE settings and desktop lockdown policies.

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by ewgny In reply to Distribute Local GPOs

Try this link
http://tinyurl.com/272vn

You may also consider using imaging software like ghost for future deployments

Collapse -

by IT cowgirl In reply to

Poster rated this answer.

Collapse -

by IT cowgirl In reply to Distribute Local GPOs

Thanks! I have seen that option and I suppose I could write a script tp copy them to all 250 machines all over the US! But there must be an easier way!
I am thinking about trying to use the mmc console to edit each one but that is insane!
We have already deployed all these machines by ghost image in December, but now management decides to implement more changes!
I really need a way to distribute to user locally and all across the USA.

Collapse -

by Don_C In reply to Distribute Local GPOs

what is the propose of the GPO is for the end user or the domain

Collapse -

by IT cowgirl In reply to

Setting Proxies, home page and other lockdown in IE as directive from corporate.
Pain they failed to include this in the requirements for the original images 3 months ago!

Collapse -

by ewgny In reply to Distribute Local GPOs

Well you can script the copy,
you can probably use winINSTALL Le to make an .MSI to install the folder, and deploy that via a script on a shared drive.
Just using the c$ administrative share for a manual copy on 250 boxes would only take a couple of hours.
So script yes if you can write it
secedit or gpedit won't do you Sh*t
or just copy it.
The big question is not how to get it out to 250 boxes, but is what the administrative nightmare is going to be to manage local group policies.
I'd say to create your script to include, or call a list of PC's so that you can quickly re-distribute the directory for new policies you create. Put it on the netlogon share and make it part of the logon script.

Because of the administrative nightmare you'd be best off going with a script copy solution

Personally I would make the case to upgrade to win2k or 2k3 since AD based GP is much more powerful. Remember, any lockdown policies you apply at the local level apply to ALL users including Administratiors !!



http://tinyurl.com/3etxj

Collapse -

by IT cowgirl In reply to

Poster rated this answer.
I thought scripting would be the best answer!
We are on the list of AD deployment and upgrading servers to W2K3.

Collapse -

by IT cowgirl In reply to Distribute Local GPOs

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums