How to create a local policy and deploy it to non-domain computers
1. Create local group policy
a. run mmc
b. add group policy object editor snap in with the local computer as policy object
c. add necessary administrative templates
d. define settings
e. close the policy object editor as to create, save and apply the policy to the local computer
2. Copy local policy
the created local group policy is to be found under:
(this is by default a hidden folder)
copy the group policy folder with all subfolders and files in it
paste it into the same place on the computer you want to have these settings applied to
the policy will take effect on next restart
keep in mind that the local policy is the first to be applied so it is overwritten by any other policies that may be defined for this machine
3. Remove policy
if the policy is no longer necessary it is not enough to remove or delete the Group Policy folder as the settings are retained in the windows registry
if you know what the settings are then you can edit them into whatever value is required
otherwise run the local group policy object editor again (as in step 1) and reset all settings back to NOT CONFIGURED
restart the workstation and check to see if the settings are returned to their defaults
To export group policy you made in on a machine with the Local Group Policy Editor (gpedit.msc) to other machines follow following steps.
1.) Open %systemroot%\system32\grouppolicy\
Within this folder, there are two folders – “machine” and “user”. Copy these to folders to the “%systemroot%\system32\grouppolicy – folder on the target machine. All it needs now is a reboot or a “gpupdate /force”.
Note: If you cannot see the “grouppolicy” folder on either the source or the target machine, be sure to have your explorer folder options set to “Show hidden files and folders”…
For security settings:
1.) Open MMC and add the Snapin “Security Templates”.
2.) Create your own customized template and save it as an “*inf” file.
3.) Copy the file to the target machine and import it via command line tool “secedit”:
Use group policy preferences to configure this setting. Create a new GPO and navigate to ‘User Configuration\Preferences\Control Panel Settings\Folder Options’. Right click and create a new Folder Options for Windows Vista or later and you’ll see the check-box.