Tools to automate Group Policy Object management tasks

Group Policies are handy, but their frequent use leads to repetitive drudgework. The most repetitive task when working with Group Policy Objects is determining how a given set of changes to Group Policy will play out. Originally, the only way to do this was to create the profile in question, log on with the created profile and view the results first-hand. For one policy alone, it wasn't too bad, but for a slew of them, it was torture.

Microsoft tried to speed up the slog of working with Group Policy Objects by introducing tools such as Resultant Set of Policy (RSoP), which lets you preview the results of applying a given policy. But RSoP has limitations. If you're dealing with an application that's not aware of RSoP Registry manipulations, it can be difficult to use RSoP in a context other than basic user rights. Situations such as these call for tools, some from Microsoft and others from third-party vendors, to make Group Policy Objects and user profiles more automatically malleable.

The first of many Group Policy Object management tools in this space comes from (as you might imagine) Microsoft. The Group Policy Management Console (Service Pack 1) allows you to script actions through the console -- not merely settings within a Group Policy Object itself, but scripting actions taken by the console on Group Policy Object. In addition, you can now preview RSoP results through HTML-formatted reports.

One tool tha...

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Microsoft Group Policy Management Group Policy management gets a boost with MDOP 2009 R2 Using software restriction policies in Windows Group Policy makes strides in Windows Server 2008 R2 Using Active Directory to manage Macs in a Windows environment Group Policy Object modeling simplifies network security Microsoft Group Policy Tutorial Is a Group Policy setting changing my user rights? Mastering account lockout values in Group Policy Group Policy Object security in Windows Deny access to Windows system properties with GPOs Windows Systems and Network Administration Troubleshooting Windows application crashes or hangs Converting VMware ESX machines to Hyper-V format Using DFSR for SYSVOL replication in Windows Server 2008 Top 25 Windows PowerShell commands for administrators Key DFS improvements in Windows Server 2008 R2 Free Windows security tools every admin must have Group Policy makes strides in Windows Server 2008 R2 Quick tips for troubleshooting NTFS permissions Common causes of Windows server security vulnerabilities Cutting the cost of Windows identity and access management

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Group Policy Object  (SearchWindowsServer.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

t automates Group Policy Object management is the GPOVault Enterprise offered by DesktopStandard Corp. Whenever a Group Policy Object is changed, GPOVault emails the admin so they know what's been updated. The tool can also perform more conventional Group Policy Object management tasks, such as controlling the Group Policy Object lifecycle. It's also possible to automatically roll back changes made by a misapplied or misconfigured GPO. Editor's note: While still available for users who have licensing agreements, GPO Vault has, as of July 1, 2007, been replaced by the new Vista-compatible Microsoft Advanced Group Policy Management tool.

If you're looking to automate system policy template creation, consider Tools4ever's Policy Template Editor. This tool can work with existing template files or create entirely new ones from scratch, and it has the ability to retrofit existing application templates for earlier versions of applications (such as using Office 97 templates for Office 95).

[IMAGE]
[IMAGE]Five back-end tasks Windows administrators should automate
[IMAGE]
[IMAGE]  Introduction
[IMAGE]  Automating Active Directory maintenance
[IMAGE]  Automating Group Policy Object management tasks
[IMAGE]  Automating DNS management tasks
[IMAGE]  Automating full-system backups
[IMAGE]  Automating Web server log archiving

About the author: Serdar Yegulalp is editor of Windows Insight, (formerly the Windows Power Users Newsletter), a blog site devoted to hints, tips, tricks and news for users and administrators of Windows NT, Windows 2000, Windows XP, Windows Server 2003 and Vista. He has more than 12 years of Windows experience under his belt, and contributes regularly to SearchWinComputing.com and SearchSQLServer.com.