standalone group policies for windows 7 non-domain GPO deployment

[farhadjamali]

Hello.

 

I work in a small organization and i m network administrator for my org. we do not have domain based active directory network infrastructure. i want to deploy group policies to every single computer and different users on these computers. for that i have to walk to every pc and making GPO settings under MMC\group policy object editor for every single pc. i want to create a single executable file for all the GPO settings done so that on rest of the PCs i just need to run executable file and all the preconfigured GPO settings should apply to that particular PC.

please guide me if there is any way to do this.

 

note: all the systems are equal in terms of users, specs, and GPO policies

 

Regards

Farhad Jamali

[bio]

Place all GPO modifications in a REG file. use this REg file on the PC's. But hey.. if you are an admin then you are able to create a small AD infrastructure

 

regards

bio

[DrPerceptron]

I think this is something that the Microsoft Security Compliance Manager (SCM) Accelerator is very useful for. I've never used the functionality, but I do remember it being there.

 

Security Compliance Manager (SCM)

[Duke5A]

Samba 4.0 was just released and can now function as an AD domain controller. From what I've read once it is setup and you manage your policies through the RSAT tools on a Windows 7 box.

[wehr]

Farhad,

 

Microsoft employees created the tool you are looking for. Google: apply_lgpo_delta.exe

 

The big advantage with this tool: it does what the name implies: applies deltas. So you can easily deploy new Policies without changing existing LGPOs on the Computers. Also works with custom adm files.

 

Disadvantage: no Group Policy Preferences. you could use custom adm files and scripts/tools as a replacement. e.g the builtin powercfg.exe

 

regards

Markus