Juste un court billet pour partager un outil un peu plus récent que le LocalGpo.msi de SCM…

Aaron Margosis a créé LGPO.EXE, qui peut pour une partie voir l’intégralité des fonctionnalité liées aux GPO Packs, remplacer l’outil de SCM.

Plus d’information sur le Blog de l’équipe chargée des guides de  Securité windows: ici: http://blogs.technet.com/b/secguide/archive/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0.aspx

LGPO.exe is a new command-line utility to automate the management of local group policy. It replaces the no-longer-maintained LocalGPO tool that shipped with the Security Compliance Manager (SCM), and the Apply_LGPO_Delta and ImportRegPol tools.

Features:

• Import settings into local group policy from GPO backups or from individual policy component files, including Registry Policy (registry.pol), security templates, and advanced auditing CSV files.
• Export local policy to a GPO backup.
• Parse a Registry Policy (registry.pol) file to readable « LGPO text » directly to the console or redirected to a file which can edited and imported into local policy.
• Build a new Registry Policy (registry.pol) file from « LGPO text ».
• Enable group policy client side extensions for local policy processing.

The zip file attached to this post includes LGPO.exe and full documentation. This is the command line syntax:

LGPO.exe v1.00 – Local Group Policy Object utility

LGPO.exe has four modes:
  * Import and apply policy settings;
  * Export local policy to a GPO backup;
  * Parse a registry.pol file to « LGPO text » format;
  * Build a registry.pol file from « LGPO text ».

bonne lecture, et bons GPOPacks!

Pierre.