Importing/Exporting Local Policies from/to GPO Directives with 'LocalGPO'
El otro día instalamos Microsoft Security Compliance Manager, today we see that within its installation we have a command-line utility called LocalGPO. It will allow us to export the local policies of a computer to a GPO policy backup to later use them in the Active Directory or import from a GPO backup (Active Directory) to the home team, Useful for computers that can't belong to a domain, teams in DMZ…
Instalamos LocalGPO que lo podremos encontrar en el equipo que tenga instalado SCM en ‘%Program Files (x86)%Microsoft Security Compliance ManagerLGPOLocalGPO.msi’,
We accept the license,
Path de instalación predeterminado ‘%ProgramFiles%LocalGPO’, “Next”,
“Install”,
…
“Finish”,
We open a DOS console, vamos a ‘%ProgramFiles%LocalGPO’, podremos exportar la política del equipo local e importarla posteriormente como GPO con: ‘cscript LocalGPO.wsf /Export /Path:RUTA_BACKUP’
Para importar una política GPO en el equipo local usaremos: ‘cscript LocalGPO.wsf /Path:”RUTA_BACKUP_GPO{GPO-GUID}”
Con ‘cscript LocalGPO.wsf /Restore’ restauraríamos a sus valores predeterminados la directiva local.