Quantcast
Channel: Security and Compliance Management forum
Viewing all articles
Browse latest Browse all 481

LocalGPO doesn't seem to do anything...?

$
0
0

OS:Windows 7 Pro, 32-bit, running under VMware Workstation

I'm trying to work out how to get LocalGPO working so that I can define a bunch of local policies and then use the tools to apply those policies to multiple PCs.

So what I did is tweak a bunch of group polices (to apply only to non-administrator users, following instructions at http://www.sevenforums.com/tutorials/101869-local-group-policies-apply-all-users-except-administrators.html). I then installed *just* the LocalGPO MSI and ran it to export:

cscript LocalGPO.wsf /Export /Path:e:\gpos\ /gpopack

and it created a long GUID-named directory full of a bunch of stuff.

I then do a snapshot and revert to an earlier snapshot, prior to all my policy changes, where I try to import it.

  1. copy e:\gpos\ and all subdirectories to c:\gpos\ just in case it matters.
  2. Start -> All Programs -> LocalGPO -> "Run as Administrator" "LocalGPO Command-line"
  3. cscript LocalGPO.wsf /path:c:\gpos\{guid}
  4. Output:
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.


Modifying Local Policy... this process can take a few moments.

Applied valid INF from c:\gpos\{guid}
Applied valid Machine POL from c:\gpos\{guid}
Applied valid User Pol from c:\gpos\{guid}
Applied vlaid Audit yPolicy CSV from c:\gpos\{guid}

Local Policy Modified!

Please restart the computer to refresh the Local Policy

So I dutifully reboot, and try logging in as the non-admin user. No changes whatsoever. Everything is still unlocked and available. (The policy changes I made severely lock down non-admin users.)

I also tried adding on "/mlgpo:users" and instead of those 4 "Applied valid..." lines, get a simple "users MLGPO... Modified!"

But still no visible policy changes.

I originally tried this with the "GPOPack" option, but running that has even less effect. Not even messages pretending to do something.

Any suggestions?


Viewing all articles
Browse latest Browse all 481

Trending Articles