LGPO.exe - Local Group Policy Object Utility, v1.0
LGPO.exe is a new command-line utility to automate the management of local group policy. It replaces the no-longer-maintained LocalGPO tool that shipped with the Security Compliance Manager (SCM), and the Apply_LGPO_Delta and ImportRegPol tools.
Features:
- Import settings into local group policy from GPO backups or from individual policy component files, including Registry Policy (registry.pol), security templates, and advanced auditing CSV files.
- Export local policy to a GPO backup.
- Parse a Registry Policy (registry.pol) file to readable "LGPO text" directly to the console or redirected to a file which can edited and imported into local policy.
- Build a new Registry Policy (registry.pol) file from "LGPO text".
- Enable group policy client side extensions for local policy processing.
LGPO.exe can be downloaded from the Security Guidance blog:
Comments
- Anonymous
January 21, 2016
How would one go about using this tool to import GPO settings from the USGCB found here: http://usgcb.nist.gov/usgcb/microsoft/download_win7.html- Anonymous
February 09, 2016
Download the GPOs and expand the .zip file. "LGPO.exe /g" will import all the settings in the GPOs.
- Anonymous
- Anonymous
September 20, 2016
Hello, Thank you for your post !I was using the "/compare" option of the localGPO.wsf tool.Do you have any idea how to perform this task now ?[Aaron Margosis] Policy Analyzer- Anonymous
September 25, 2016
Thanks for your reply ! I saw this (cool) tool too, but i would update a powerhsell script which uses the old "/compare" option.So, according to your reply (Policy Analyzer post: Patrik's comment from Jan 30 2016), I will try to automate the comparison with the ".exe" programs available. Can you tell me, if a "compare option" is in preparation for script use ?Thank you in advance.
- Anonymous