Windows Forum

Ask something
Discussion Locked

Distribute Local GPOs

0 helpful
8 replies

by it cowgirl 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to distribute a local GPO created in MMC to all W2K Pro machines on the network. We are running an NT server Domain, so no AD at present.

What would work best? Script? Login script?
Secedit utility or gpupdate utility?
Just copy the files from the Group Policy folder to all W2K desktops??

Any help will be appreciated! We are ostly applying IE settings and desktop lockdown policies.

8 replies

by it cowgirl

Thanks! I have seen that option and I suppose I could write a script tp copy them to all 250 machines all over the US! But there must be an easier way!
I am thinking about trying to use the mmc console to edit each one but that is insane!
We have already deployed all these machines by ghost image in December, but now management decides to implement more changes!
I really need a way to distribute to user locally and all across the USA.

by it cowgirl

Setting Proxies, home page and other lockdown in IE as directive from corporate.
Pain they failed to include this in the requirements for the original images 3 months ago!

by ewgny

Well you can script the copy,
you can probably use winINSTALL Le to make an .MSI to install the folder, and deploy that via a script on a shared drive.
Just using the c$ administrative share for a manual copy on 250 boxes would only take a couple of hours.
So script yes if you can write it
secedit or gpedit won't do you Sh*t
or just copy it.
The big question is not how to get it out to 250 boxes, but is what the administrative nightmare is going to be to manage local group policies.
I'd say to create your script to include, or call a list of PC's so that you can quickly re-distribute the directory for new policies you create. Put it on the netlogon share and make it part of the logon script.

Because of the administrative nightmare you'd be best off going with a script copy solution

Personally I would make the case to upgrade to win2k or 2k3 since AD based GP is much more powerful. Remember, any lockdown policies you apply at the local level apply to ALL users including Administratiors !!

http://tinyurl.com/3etxj

by it cowgirl

Poster rated this answer.
I thought scripting would be the best answer!
We are on the list of AD deployment and upgrading servers to W2K3.

This discussion is closed to new replies.