Apply Local Group Policy to Multiple Computers – Step-by-Step Guide

group-policywindows-server-2008-r2

Exactly like the title said, How can I apply local group policy to multiple computers? Around 500 PCs (I think) I understand the domain group policy can push down the policy but for my scenario here, The computers are NOT suppose to joined to any domains till this local Computer Policy is in place. So in terms of the PC whether it joins a domain or not, it will always have the Policy been applied.

So my question is how can I copy the Local Group Policy to many computers? I already tried Google have already try out this
http://www.daniweb.com/hardware-and-software/microsoft-windows/windows-vista-and-windows-7-8/threads/279367/group-policy-objects-for-multiple-pcs.

It's the same issue, with the original thread owner, it doesn't work, anyone can enlighten me here? Possible to do it? What are the ways?

Best Answer

GPO settings can be copied like this:

1.) Open %systemroot%\system32\grouppolicy\

Within this folder, there are two folders – “machine” and “user”. Copy these to folders to the %systemroot%\system32\grouppolicy – folder on the target machine. All it needs now is a reboot or a “gpupdate /force”.

For security settings:

1.) Open MMC and add the Snapin “Security Templates”.

2.) Create your own customized template and save it as an “*inf” file.

3.) Copy the file to the target machine and import it via command line tool “secedit”:

secedit /configure /db %temp%\temp.sdb /cfg <'yourGP'>.inf

Out of curiosity - why aren't these going on the domain? Any changes you will need to make will require doing this to all the PCs every time. I highly discourage using local GPOs on this amount of machines.