3

I have a GPO I've exported from Group Policy Editor on a domain controller. Is there a way to apply this policy to a computer that isn't connected to a domain at all? Just a one-time application of all the settings.

Thanks

4

All the settings no, but doing the following will allow you to import those settings that can be imported

1) Export using the Group policy from the domain and save/copy it to the local machine

2) Grab this tool Microsoft Security Compliance Manager which after install will give you LocalGPO.wsf

3) cscript LocalGPO.wsf /path:C:\path to backup\{42ADD8FE-EDF6-479B-92C6-557343D8D090}

The link for step 2 is the latest version but there is a lite/older version but depending on OS (which you don't mention) it may not work for you LocalGPO (lite version)

  • You should be able to apply all settings applicable to a non domain joined machine. – Jim B Dec 11 '15 at 0:32
  • Once I get LocalGPO.wsf, can I used it on other machines without installing that tool? – Carrot Dec 11 '15 at 19:59
0

On a standalone computer you can only edit the security policy; all other sections in domain GPOs are just not available outside a domain environment.

However, you can replicate many GPO settings by changing the corresponding Registry keys.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.