Tools to automate Group Policy Object management tasks

Group Policies are handy, but their frequent use leads to repetitive drudgework. The most repetitive task when working with Group Policy Objects is determining how a given set of changes to Group Policy will play out. Originally, the only way to do this was to create the profile in question, log on with the created profile and view the results first-hand. For one policy alone, it wasn't too bad, but for a slew of them, it was torture.

Microsoft tried to speed up the slog of working with Group Policy Objects by introducing tools such as Resultant Set of Policy (RSoP), which lets you preview the results of applying a given policy. But RSoP has limitations. If you're dealing with an application that's not aware of RSoP Registry manipulations, it can be difficult to use RSoP in a context other than basic user rights. Situations such as these call for tools, some from Microsoft and others from third-party vendors, to make Group Policy Objects and user profiles more automatically malleable.

The first of many Group Policy Object management tools in this space comes from (as you might imagine) Microsoft. The Group Policy Management Console (Service Pack 1) allows you to script actions through the console -- not merely settings within a Group Policy Object itself, but scripting actions taken by the console on Group Policy Object. In addition, you can now preview RSoP results through HTML-formatted reports.

One tool that automates Group Policy Object

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Microsoft Group Policy Management Using Active Directory to manage Macs in a Windows environment Group Policy Object modeling simplifies network security Microsoft Group Policy Tutorial Is a Group Policy setting changing my user rights? Mastering account lockout values in Group Policy Group Policy Object security in Windows Deny access to Windows system properties with GPOs Advanced Group Policy for Windows Vista Windows Server 2008's Group Policy has faster searching and filtering Why don't I have proper Windows Server 2003 rights to open a GPO? Windows Systems and Network Administration Common causes of Windows server security vulnerabilities Cutting the cost of Windows identity and access management Using NTFS on a non-Windows OS with NTFS-3G Group Policy Object modeling simplifies network security Implementing simple Network Access Protection for Windows Server 2008 Immediate steps for Windows disaster recovery Tips for Windows domain controller optimization Quick hits: Troubleshooting service account failure, batch job execution Case Study: Troubleshooting Windows service dependency failures Troubleshooting common Windows service failures

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Group Policy Object  (SearchWindowsServer.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

management is the GPOVault Enterprise offered by DesktopStandard Corp. Whenever a Group Policy Object is changed, GPOVault emails the admin so they know what's been updated. The tool can also perform more conventional Group Policy Object management tasks, such as controlling the Group Policy Object lifecycle. It's also possible to automatically roll back changes made by a misapplied or misconfigured GPO. Editor's note: While still available for users who have licensing agreements, GPO Vault has, as of July 1, 2007, been replaced by the new Vista-compatible Microsoft Advanced Group Policy Management tool.

If you're looking to automate system policy template creation, consider Tools4ever's Policy Template Editor. This tool can work with existing template files or create entirely new ones from scratch, and it has the ability to retrofit existing application templates for earlier versions of applications (such as using Office 97 templates for Office 95).

[IMAGE]
[IMAGE]Five back-end tasks Windows administrators should automate
[IMAGE]
[IMAGE]  Introduction
[IMAGE]  Automating Active Directory maintenance
[IMAGE]  Automating Group Policy Object management tasks
[IMAGE]  Automating DNS management tasks
[IMAGE]  Automating full-system backups
[IMAGE]  Automating Web server log archiving

About the author: Serdar Yegulalp is editor of Windows Insight, (formerly the Windows Power Users Newsletter), a blog site devoted to hints, tips, tricks and news for users and administrators of Windows NT, Windows 2000, Windows XP, Windows Server 2003 and Vista. He has more than 12 years of Windows experience under his belt, and contributes regularly to SearchWinComputing.com and SearchSQLServer.com.