Backup and restore the Local GPO (Windows)

In this article we'll introduce the method to backup and restore the Local GPO.

LOCALGPO, A handy tool to apply security setting to non-domain joined computers or Local GPO in your organization.

Backup and restore the Local GPO (Windows)

Export Policy

cscript LocalGPO.wsf /Path:C:\GPObackups /Export 

Exports a GPO Backup based on the Local Policy configuration to a folder in the specified path.

Backup and restore the Local GPO (Windows)

At this point a new folder will be created:

Backup and restore the Local GPO (Windows)

Import Policy

cscript LocalGPO.wsf /Path:C:\GPObackups\{GPO Backup GUID}

Applies the contents of the GPO Backup stored in the specified path to the Local Policy of a Windows computer.

Backup and restore the Local GPO (Windows)

Create GPOPack

Create GPOPack to deploy via Microsoft Deployment Toolkit (MDT) or Microsoft System Center Configuration Manager (SCCM).

cscript LocalGPO.wsf /Path:C:\GPObackups /Export /GPOPack 

Creates a GPOPack and stores it in the specified path. GPOPacks can be copied to other computers, and applied by double-clicking GPOPack.wsf.

Backup and restore the Local GPO (Windows)

Copy the folder and double click GPOPack.wsf from other machine to apply the same policy.

Backup and restore the Local GPO (Windows)

You may notice that you get a pop-up message when you run this command.

Backup and restore the Local GPO (Windows)

This can be suppressed by adding the “/silent” switch.

Script to deploy via MDT and SCCM

GPOPack.wsf /silent

Backup and restore the Local GPO (Windows)

Restore Policy to default

cscript LocalGPO.wsf /Restore

Restores the entire Local Policy to its default configuration.

Backup and restore the Local GPO (Windows)

It’s FREE!

You can get your hand on the LocalGPO tool right now as part of the Microsoft Security Compliance Manager.

Download

NOTE: this download will be available only for logged in users.
[wpfilebase tag="file" id=129 /]