Copy LGPO from PC to PC

  • Thread starter Thread starter kcnpeppa
  • Start date Start date
K

kcnpeppa

I am implementing LGPO on XP Pro machines in an NT
domain. Once this is defined on a single system, is it
possible to copy the Machine and and User reg.pol files
from one PC to another? Will this implement the LGPO
correctly?
 
The way to go about this is to use the security configuration
toolset, specifically the two snap-ins named Security Templates
and Security Configuration and Analysis.

First one builds a template with the settings desired, and then
this is imported into the config/analysis tool, following which
one does an analyze, then verify that that changes it will make
are what are desired, and then finally one does an apply.

Building the template can be a little touchy if one is doing the
services or filesystem or registry permissions. With these one
needs to be very careful after the analyze stage that what is to
be changed is what one wants.
The other parts of a template are pretty straightforward.

However, after this is done the template can be transported and
it can also be imprinted onto a system using the secedit command.
 
Thanks for the response. I should have been more
specific. I've already followed the Windows XP Security
Guide for securing standalone systems and used the
accompanying scripts to secure the file system, registry
and account policy. I was hoping to use Administrative
Templates to retrict user access/configure the Control
Panel, Start Menu, etc. Since we are not implementing AD
for another 4 months, I was hoping to come up with a quick
and dirty yet problem-free solution. I guess I could
spend the time to configure all the registry keys/values
but is there no other way?
 
I think we are speaking the same language, although now
that you clarify it is settings in administrative templates
that are of interest, the message is going to change.
The adm templates are just text files (unicode IIRC),
which you can edit and then import (r-click menu of the
Adminstrative Templates node. I do not know how to
automate the import.
 
Back
Top