Scripting GPOs and Policies

Six6siX · 1 Feb 2011 at 22:05

I'm not entirely sure this can be done but it's worth an ask.

Is it possible to script GPO creation and/or importing?

And is it possible to script changes to domain/domain controller security policies etc?

Systems running Server 2003 R2, and currently we have to manually create the GPOs and import a backup, changing folder redirection for each, then change settings as applicable.

I have done a lot of the AD structure scripting already and if I could script this bit then that would automate a large chunk of the config process.

Have had a search around but can't seem to find any information on this

Thanks

anything I don't mind · 1 Feb 2011 at 23:48

why would you need to script it? it replicates across domains and down to the clients.

Six6siX · 2 Feb 2011 at 10:42

But it would need implementing in the first instance - which is what I want to script.

The replication on the partner domain controller isn't the issue, as like you say, it will replicate.

It does sound strange, but for their application, this is a process that needs to be repeated quite often as the server pairs are in isolation from anything else.

IAmATeaf · 2 Feb 2011 at 21:08

We have scripts that backup the GPO if it already exists, then imports the GPO and finally links the GPO to an OU.

The above is scripted to simply minimise on errors when the service team implements a new policy or updates an existing.

I don't have the cmd files to hand but can post more info if the above is of interest.

IAmATeaf · 3 Feb 2011 at 11:51

This is the link that we used to create the cmd files

http://msdn.microsoft.com/en-us/library/aa814151(v=vs.85).aspx

Six6siX · 3 Feb 2011 at 18:15

That sounds exactly like what I am after, thanks for the link. I will give that a shot

Six6siX · 7 Feb 2011 at 11:16

Worked perfectly, thanks for that