Deploy a local policy

[Guest]

Hello,

I need to change the local policy of all my computers in my domain. I've try
to change directly the registry value, but when I check in gpedit.msc the
value are not change.

How can I do to change local policy of 600 computers without reinstalling
them ? I also don't have access to the Global Policy tools. I can manage my
OU but not policies

Regards
HEGms

 

[Steven L Umbach]

That is plain crazy to have to do it for local Group Policy in a domain for
600 computers and even so domain or OU level policies will override the same
defined settings in local Group Policy. Consult with whoever is a domain
administrator on how to proceed. If he does not trust you with configuring
Group Policy on your OU then he or some other domain level administrator
will need to configure Group Policy on your OU for you after you make your
case for the needed settings you want implemented. --- Steve

 

[Roger Abell [MVP]]

Get a GPO defined and linked to your OU and write of its
settings within that GPO delegated to you.
The above is AD level 101. Those controlling the enterprise
need to understand that and leverage what is Windows to
enble you in your work. Feel free to forward the comment.

Otherwise, you could define a security template and then
use secedit at each machine to import it into the local security
policy. Regretfully, as you do not have access to startup
script policies for the machines, you would have to do this
by being innovative or by visiting 600 machines.

Now, you do not say what reg keys you were touching,
but if they are ones with /Policies/ in their path, and you are
finding that your changes to values do not stick, then doing
as just outlined for adjustment of local policy will yield no joy.
That your manual changes do not stick shows that they are
being controlled by AD based GPO policy settings.

Your solution is in getting the domain admins to delegate
as the Windows architecture allows and intends.