On Mon, Aug 22, 2011 at 10:22 AM, Donny Brooks <dbrooks at mdah.state.ms.us> wrote: > On 8/22/2011 12:16 PM, John Danks wrote: >> >> I use a package definition that overwrites the entire local group >> policy. If you want to have different local group policies on >> different machines then you have to make multiple versions of this. I >> only have the regular policy and a mobile policy, so it works out well >> enough for me. >> >> <package >> id="group_policy" >> name="Default Windows Local Group Policy" >> revision="8" >> priority="50" >> execute="always"> >> >> <check >> type="file" >> condition="exists" >> path="C:\WINDOWS\system32\GroupPolicy\gpt.ini" /> >> >> <install cmd='%COMSPEC% /C rmdir /S /Q >> C:\WINDOWS\system32\GroupPolicy'> >> <exit code="2" /> >> </install> >> <install cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy' >> /> >> <install cmd='%COMSPEC% /C xcopy /E /H >> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\' >> /> >> <install cmd='%COMSPEC% /C gpupdate' /> >> >> <upgrade cmd='%COMSPEC% /C rmdir /S /Q >> C:\WINDOWS\system32\GroupPolicy'> >> <exit code="2" /> >> </upgrade> >> <upgrade cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy' >> /> >> <upgrade cmd='%COMSPEC% /C xcopy /E /H >> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\' >> /> >> <upgrade cmd='%COMSPEC% /C gpupdate' /> >> >> <remove cmd='%COMSPEC% /C rmdir /S /Q >> C:\WINDOWS\system32\GroupPolicy'> >> <exit code="2" /> >> </remove> >> </package> >> >> >> On Mon, Aug 22, 2011 at 9:38 AM, Donny Brooks<dbrooks at mdah.state.ms.us> >> wrote: >>> >>> Does anyone have the settings they use to push out the settings to make >>> windows use their internal WSUS server? Normally when we setup a new pc >>> we >>> go in to gpedit.msc and manually configure them. However I have found the >>> registry settings that I can force. The problem is the settings are not >>> reflected by gpedit.msc when I import the registry settings. Is this >>> normal? >>> If so I know how I can send out the registry changes with wpkg. Does >>> anyone >>> else do this currently? >>> >>> Donny B. >>> ------------------------------------------------------------------------- >>> wpkg-users mailing list archives>> >>> http://lists.wpkg.org/pipermail/wpkg-users/ >>> _______________________________________________ >>> wpkg-users mailing list >>> wpkg-users at lists.wpkg.org >>> http://lists.wpkg.org/mailman/listinfo/wpkg-users >>> > Would you care to share how you built the > %SOFTWARE%\apps\group_policy\default file? or could you send an example. > That is what I have been unable to find a good example of to this point. > Basically all we push are the WSUS settings but there is so much more we > would like to push. Not being on an Active Directory domain has it's > drawbacks but if this works maybe we can work around some of them! > > Donny B. > Set up the local GP how you want it on a PC with gpedit.msc and then copy the contents of C:\WINDOWS\system32\GroupPolicy over to your %SOFTWARE% area. |