How to script GPO in Windows computers without Active Directory?

Posted by Peteris Krumins on Server Fault See other posts from Server Fault or by Peteris Krumins
Published on 2010-12-03T23:30:42Z Indexed on 2011/01/06 7:55 UTC
Read the original article Hit count: 181

Filed under:
|
|
|

Does anyone know how to script GPO for users in a Windows computer that is not on any Active Directory network?

I can't use GPMC because it doesn't work without a domain. I have been searching the net for the last couple of hours and all the solutions that I find are related to GPMC.

I'd imagine there are some objects in the GPO that are accessible via WMI? Does anyone know anything about that? I was unable to find any information about that.

Here is the situation I am trying to script:

I have 10 users on the machine, and I want to restrict what they are able to do on the machine. So I created 10 GPOs for each one of them. Now I want to apply a common policy to all of them. The only way to do it is to go through each of the GPO and do it manually. This is too time consuming, therefore I am seeking for a simpler solution.

I was unable to find a way to copy GPO from a user to a user. That would make it much easier, I would create a GPO for 1st user, then copy it over to all the other users, but no luck, couldn't find a way to copy GPOs.

The other method I tried was creating a GPO for the whole user group but it turns out you can't apply GPO to a group unless you use GPMC, which I can't cause the computer is not on any domain.

So I am thinking about scripting this whole process, but again I can't find any examples of how to access particular GPO objects for particular users and modify properties through WMI.

Any suggestions on the issue I am having?

Thanks!

© Server Fault or respective owner

Related posts about Windows

Related posts about group-policy