Friday, April 29, 2011

Configure Local Group Policy via the command line

Apply a security policy using an .inf file

[Unicode]Unicode=yes
[Version]signature="$CHICAGO$"
Revision=1
[Profile Description]
Description=profile description
[System Access]
MinimumPasswordAge = 10
MaximumPasswordAge = 30
MinimumPasswordLength = 6
RequireLogonToChangePassword = 0
NewAdministratorName = "NewAdminAccountName"
NewGuestName = "NewGuestAccountName"

Simple to apply from a cmd line

secedit /configure /db %windir%\security\database\localdb.sdb /cfg %systemdrive%\install\local\policy\policyname.inf /verbose
at

2 comments:

  1. Unknown5:01 PM

    Great comment. Can this methodology be used to deploy a custom local GPO to my windows XP clients?

    I can't do it with AD for reasons not worth going into, though if you are curious you can see some details here:

    http://social.technet.microsoft.com/Forums/en/winserverGP/thread/dcb68840-f0fc-496f-a7a9-fea9f6981054

    Any thoughts?

    ReplyDelete
  2. Trentent3:13 PM

    Uknown, you should be able to do what you are describing via local GPO I believe.

    ReplyDelete