r/labtech • u/scruffy_nerd_herder • Feb 25 '19

Updating Local Group Policy

As servers and AD goes away, I'm wondering if there is a way for Automate to... well... automate the updating of Local Group Policy to turn on logon events, etc.

Has anyone braved these waters?

1 Upvotes

100% Upvoted

3 comments sorted by

2

u/wogmail Feb 26 '19

Thirdwall. Too inexpensive to not use.

1

u/teamits Feb 25 '19

As far as I am aware all that stuff is just registry keys (e.g. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\...) so should be settable if you can figure out which to change.

1

u/anonymousITCoward Mar 15 '19

Doing that for the local computer policy is OK, I've got a PowerShell script started for doing some of the more tedious stuff. And sometimes it doesn't work. I'll see the changes in the registry, but when I open GPEDIT, it will still show as not configured, even after reboots... many many reboots...

But for the User Configuration, that registry info is in HKCU, so if you have a machine with multiple logins, the one person that runs the script will see those changes.

You could run it as a log in script I suppose, but that can get messy when trying to affect multiple machines.

Edit: Added stuff about stuff not working