Applying Domain GPO to standalone machines

hello

please point me in right direction find out main differences between available settings of local group policy compared domain group policy? know local gpo supports subset of features in ad-based gpo, , find out missing!

i asking because have followed instructions here:

http://social.technet.microsoft.com/forums/en-us/winservergp/thread/6ae68aed-7db2-4d5e-b360-c3bf502bfc24#1570ff85-6a18-4caf-827e-0c3053cc6b70

in order export , import our domain policy standalone machines, settings not valid. have comparison list of can , can't apply, or tell me can find 1 please?

the aim of game me make ad group policy can import/export batch of standalone machines @ various external locations in order securely lock them down. never contact our domain.

many in advance

amy

hi,

> please point me in right direction find out main differences between the
> available settings of local group policy compared domain group policy?

we can’t find official steps or methods export domain gpo local standalone computer ms website, let alone differences feature table.

because data in domain gpo domain-specific , might not valid if copied directly domain, these gpos may not available when import them local.

gpmc introduces migration tables; migration table file maps references users, groups, computers, , unc paths in source gpo new value in destination gpo.

following items contain security principals , can modified using migration table, these domain gpos may not available in local policy:

• security policy settings of following types:
  • user rights assignment
  • restricted groups
  • system services
  • file system
  • registry
• advanced folder redirection settings
• the gpo dacl, if preserved during copy operation
• the dacl on software installation objects, preserved if option copy gpo dacl specified

for more information please refer following ms articles:

backing up, restoring, migrating, , copying gpos
http://technet.microsoft.com/en-us/library/cc781458(ws.10).aspx
group policy
http://msdn.microsoft.com/en-us/library/windows/desktop/bb851669.aspx

---

lawrence

technet community support

Windows Server  >  Group Policy