zoukankan      html  css  js  c++  java
  • How to apply Local Group Policy settings silently using the ImportRegPol.exe and Apply_LGPO_Delta.exe utilities.

    参考:http://supportishere.com/how-to-apply-local-group-policy-settings-silently-using-the-importregpol-exe-and-apply_lgpo_delta-exe-utilities/

    In many Organizations, the AD support team is separated from the team in charge of Imaging.  The AD team naturally is protective with their setup and fight any GPO setting that would result in more responsibility to their staff.  So that leaves us in some occasions having to turn to Local Group Policy to apply the settings we want.  I’ve recently come across some great tools provided by Microsoft (very quietly) for Government usage.  These tools allow you to basically back up your LGPO settings to a txt file and apply them on demand with a script silently.

    MS link: http://blogs.technet.com/cfs-file.ashx/__key/communityserver-components-postattachments/00-03-05-16-48/LGPO_2D00_Utilities.zip
    BackUp link: https://panaconsulting.egnyte.com/h-s/20120118/077e07ba18c74413

    How to use:

    1. Apply desired settings on a Windows 7 test machine, using the gpedit.msc MMC snap-in.
    2. Run the “ImportRegPol.exe” with the /parseonly and /log to pull settings and save to a specified LOG file.
      User settings and machine settings need to be captured separately:
      LGPO User Settings
      Capture User Example
      ImportRegPol.exe /u  C:WindowsSystem32GroupPolicyUser egistry.pol /parseonly /log <PathToSettingsFile>.log
      LGPO Machine Settings
      Capture Machine Settings Example:
      ImportRegPol.exe /m  C:WindowsSystem32GroupPolicyMachine egistry.pol /parseonly /log <PathToSettingsFile>.log
    3. Use the Apply_LGPO_Delta.exe utility to apply the settings silently.  On restart the settings will take effect.
      Apply_LGPO_Delta.exe <PathToSettingsFile>.log /log <PathToLogFile>.log
    4. This can easily be added to an SCCM or MDT Task Sequence and tied to logic to ensure the correct settings get pushed to the appropriate target systems/users.

    Command Line help for LGPO Tools:

    Apply_LGPO_Delta.exe inputfile0 [inputfile1 ...] [/log LogFile] [/error ErrorLogFile] [/boot]

    inputfileN             One or more input files specifying the changes to make.  Input files must be security template files, or registry-based policy files using a custom file format described below.  Apply_LGPO_Delta automatically determines whether a file is a custom policy file or a security template.  Security templates can be created using the “Security Templates” MMC snap-in.

    /log LogFile           Writes detailed results to a log file.  If this option is not specified, output is not logged nor displayed.

    /error ErrorLogFile   Writes error information to a log file.  If this option is not specified, error information is displayed in a message box dialog.

    /boot                  Reboots the computer when done.

    ImportRegPol.exe –m|-u path egistry.pol [/parseOnly] [/log LogFile] [/error ErrorLogFile] [/boot]

    -m path egistry.pol   [for Computer configuration] or

    -u path egistry.pol   [for User configuration]

    Path egistry.pol specifies the absolute or relative path to the input registry policy file (which does not need to be named “registry.pol”).

    /parseOnly             Reads and validates the input file but does not make changes to local group policy.  In conjunction with the /log option, can be used to convert a registry policy file to an input file for Apply_LGPO_Delta.

    /log LogFile           Writes detailed results to a log file.  If this option is not specified, output is not logged nor displayed.  The logged results for the registry policy settings can be used as input for Apply_LGPO_Delta.

    /error ErrorLogFile   Writes error information to a log file.  If this option is not specified, error information is displayed in a message box dialog.

    /boot                  Reboots the computer when done.

  • 相关阅读:
    【NOIP2012模拟10.6】填充棋盘
    【NOIP2012模拟10.6】购买
    ASP.NET网站权限设计实现(二)——角色权限绑定
    ASP.NET网站权限设计实现(一)——使用PowerDesigner进行数据库设计
    获取post发送过来的xml包
    js正则表达式30分钟入门教程
    SELECT INTO 和 INSERT INTO SELECT 两种表复制语句
    js 取整
    [ASP.NET MVC2 系列] ASP.Net MVC教程之《在15分钟内用ASP.Net MVC创建一个电影数据库应用程序》
    c# 多线程排队队列实现的源码
  • 原文地址:https://www.cnblogs.com/jjkv3/p/4069326.html
Copyright © 2011-2022 走看看