Script to affect Local Group Policy

April 13th, 2011 - 08:12 pm ET by GuardianTai | Report spam
I would like to know if I can wirte a script that would configure local group policy on several laptops?

For those of you wondering why I want to do this (as someone is likely to ask with some sort of self delegated authority) I've recently been covering down on a coworker who mainly images laptops to deploy to different locations. Something I have noticed is that for every laptop he images, he manually configures the local gp prior to joining these said laptops to the domain. Now, one might wonder why as these laptops will inherit policies once introduced to the domain, however, after speaking with our GPO guy, he basically told me that those specific policies aren't being pushed by GPO hence why my coworker is doing it manually (the end) This is where my question comes into play I'd like to have a .vbs or .bat file that I can run on each of these computers that will automate this process. It just seems silly to me that an IT department hasn't yet figured to do this yet . Most of the answers i get is "i just don't know how to..." So I'd like to learn or atleast be pointed in the right direction All I'd really need is a sample and I think I can go from there.

The following is just a bite of what needs to be configured.
Computer Configuration> windows settings> security settings > Local Policies > User rights assignments > Allow logon thru terminal services - add "Administrators"
Computer Configuration> windows settings> security settings > Local Policies > User rights assignments > Deny logon thru terminal services - Remove "Everyone"
Computer Configuration> windows settings> security settings > Local Policies > Security Options > Domain Member: digitally encrypt (alway) - "Disabled"

then

Computer Configuration >Administrative Templates > Printers > Disallow installation of printers using kernal-mode printer drivers - "Disabled"

there's more but i think I'll get the gist with those

Thanks in advance to any one who HELPS

T
email Follow the discussionReplies 6 repliesReplies Make a reply

Replies

#1 Todd Vargo
April 13th, 2011 - 11:02 pm ET | Report spam
"GuardianTai" wrote in message
news:
I would like to know if I can wirte a script that would configure local
group policy on several laptops?

For those of you wondering why I want to do this (as someone is likely to
ask with some sort of self delegated authority) I've recently been covering
down on a coworker who mainly images laptops to deploy to different
locations. Something I have noticed is that for every laptop he images, he
manually configures the local gp prior to joining these said laptops to the
domain. Now, one might wonder why as these laptops will inherit policies
once introduced to the domain, however, after speaking with our GPO guy, he
basically told me that those specific policies aren't being pushed by GPO
hence why my coworker is doing it manually (the end) This is where my
question comes into play I'd like to have a .vbs or .bat file that I can
run on each of these computers that will automate this process. It just
seems silly to me that an IT department hasn't yet figured to do this yet .
Most of the answers i get is "i just don't know how to..." So I'd like to
learn or atleast be pointed in the right direction All I'd really need
is a sample and I think I can go from there.

The following is just a bite of what needs to be configured.
Computer Configuration> windows settings> security settings > Local Policies
User rights assignments > Allow logon thru terminal services - add


"Administrators"
Computer Configuration> windows settings> security settings > Local Policies
User rights assignments > Deny logon thru terminal services - Remove


"Everyone"
Computer Configuration> windows settings> security settings > Local Policies
Security Options > Domain Member: digitally encrypt (alway) - "Disabled"



then

Computer Configuration >Administrative Templates > Printers > Disallow
installation of printers using kernal-mode printer drivers - "Disabled"

there's more but i think I'll get the gist with those

Thanks in advance to any one who HELPS

T

Similar topics