Windows – Change Local Group Policies remotely on Windows workstations outside Windows domain

domaingroup-policywindows

Is it possible to change Local Group Policies on Windows workstations remotely outside a Windows domain? Furthermore, can a script be written that would change GP on several workstations one by one?

Thanks!

Best Answer

Assuming you have admin rights on that local computer or access to an account you could do the following:

  1. launch an mmc (if you have to change accounts, then use runas from a cmd line to launch the mmc)
  2. You can add the Group Policy snap-in from File, Add/Remove Snap-in
  3. Choose `Group Policy Object Editor" and click Add
  4. Change it from Local Computer by clicking "Browse" and then clicking "Another Computer" and typing in the name of the remote computer

As far as running a script...sure, but you'd have to be a lot more specific as to how you want to connect to the computers, whether you want it to run once remotely or at login, scheduled, etc. etc. etc.

Related Topic