Solved i have created non-administrative user based policies to the computer

[expressions]

in my company there are 15 computers no domain, i have created non-administrative user based policies to the computer and now i need to apply the same policies on all computers. is there any way to copy and paste or import the policies to all the computers step by step guide. it is a policy.msc file.

we have windows 7 ultimtae 64-BIt

i have tried these 3 methods and do not understand them.

http://www.chicagotech.net/netforums/viewtopic.php?f=4&t=3780



Florian's Blog » How can I export local Group Policy settings made in gpedit.msc?

https://social.technet.microsoft.co...olicies-to-another-computer?forum=winserverGP


there is one more issue i like to mention here if someone can help. i am trying to make an administrator account with complete administrator privilege. windows 7 does not allow me to do that. it says there can only be one administrator. i have give the user admin rights but they are not full rights

 

[GokAy]

This one is pretty straight forward - Florian's Blog » How can I export local Group Policy settings made in gpedit.msc?, what exactly do you not understand?

 

[expressions]

%systemroot%\system32\grouppolicy i see two folders machine and users and one file named gpt.in, in machine i see scripts folder and registry.pol. in script folder there are two empty folders restart and shutdown, and the USER folder is empty.

i dont understand where to paste GP.msc file or i need to change the .msc file to the .inf and then paste it . what will happen to the local security policies ? pasting .msc file of user policies is enough?
we dont have a domain its a standalone windows 7 ultimate workstation.

 

[GokAy]

Ok, copy the two folders under "%systemroot%\system32\grouppolicy" on a machine you customized Group Policy and paste them to the same folder of another PC you want to use the same settings. Then either run the update command in the linked guide or simply restart the PC so new settings take effect.

 

[expressions]

Thanks i am gonna try this as soon as i go to my office in next 2 hours, i just need to copy the folders not the gpt.ini file ? what about the .msc file i have for non administrative users, can i just copy and past it to other computers? and it will work fine?

 

[GokAy]

On my machine I don't see anything special in the gpt.ini file, leave it out for now. Just copy the 2 folders.

You have mentioned policy.msc and then GP.msc, are these same? How did you get them?

Local Security Policies are a subset of Group Policy and will be copied when you copy the above 2 folders. See http://www.sevenforums.com/tutorials/7357-local-security-policy-editor-open.html for some more information.

Changing to inf file in the guide is for Security Templates.

Also to answer your question about administrator account, you can only have 1 user named "Administrator". However, you can create any number of admin accounts with other names. See http://www.sevenforums.com/tutorials/181024-user-account-create.html

 

[expressions]

in cmd i typed mmc and from there i added add remove snap in added group policy object BROWSE NOn administrators. after that i applied policies to the non administrators and saved it on my desktop with the file name as GP. the extension of file is .msc

i have checked the size of gpt file size its 4KB on other computer and 8KB on my computer where i have all the policies

and the complete size of "%systemroot%\system32\grouppolicy" where the folder and a gpt file exist have the same 8KB size which is equal to the gpt file size

 

[GokAy]

Alright I see now I pointed you to that tutorial. You don't need that msc file, it is only to manage the Group Policy settings for specific users (in your case non-admins). The settings themselves should be stored within the 2 folders. So just copy them to another machine and test whether the settings are enforced yourself.

 

[expressions]

first i copy pasted both folders to other computer used the command gpupdate /force nothing happen, after that i pasted gpt file . and run the command gpupdate /force . still nothing, standard user has no restrictions.

 

[GokAy]

Did you get the "Policy Updating" or a similar message when you run update command? Try restarting the PC just in case.

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[expressions]

Did you get the "Policy Updating" or a similar message when you run update command? Try restarting the PC just in case.

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[GokAy]

I only have 1 Pro machine here at the moment, so I can't actually test copying myself.

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined.

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[expressions]

policy updating , policy updated successfully. these are the messages i get. i have restarted the computer twice, just to be sure and used gpupdate /force 3 times. after that that i went to mmc created the snap in group policy object for non administrator, and i cant see any policy pre defined

 

[GokAy]

Ok, here is how you do it:
- Finish customizing Group Policy for Non-Admins
- Browse to C:\Windows\System32\GroupPolicyUsers (may be hidden)
- Copy the folder S-1-5-32-545 to the other machines C:\Windows\System32\GroupPolicyUsers folder
- Force update the new PC "gpupdate /force" (restart PC if this doesn't work)

Note 1: You will have to open mmc and add snap-in for non-admins as you previously did with the master PC with an admin account to see which settings have been applied.
Note 2: The SID S-1-5-32-545 belongs to the built-in Users group.

Hope this helps.

 

[expressions]

okay thanks i am gona apply this i hope this will work