1

I searched I can’t seem to find an answer to my question and my google-fu is quite strong. I work in a unique situation where we have to lock down all of our computers that are stand alone or in their own LAN with a GPO. I thought my image of Win7 had a GPO it does not under the student account I could access all the files, that’s a bad thing.

I have a portable HDD with a copy of our GPO.msc file preconfigured but I can’t get a straight answer from the person who created it where do I put it? I need to install it and have it lock down 28 individual computers before my audit in 4 weeks I have exhausted all resources this is my last resort.

Any help is more than greatly appreciated.

2 Spice ups
2

You don’t install Group Policy. You have it already. If you have PCs on the network managed by a domain controller, you control it from the server. If these are local, you can access and modify the local editor, then see this guide:

2 Spice ups
3

Not really following.

GPO.MSI ?

Stand-alone? As in a WorkGroup?

Need more details

4

Like Denis said, Group Policy gets applied from the server. Do you have experience with Active Directory? Do you have access to it? Is there someone else that does?

5

When you say standalone, do they just use Local Policy and aren’t attached to a domain?

6

Stand alone not on a domain they are student pc’s my co-worker gave me a file said this is our GPO preconfigured just install it to lock down computers.

7

I have the extension wrong its name is Console1.msc

8

Try this to see if it helps you

2 Spice ups
9

I’m guessing you are working to configure the local GPO. Not the most efficient way to accomplish things, but you gotta do what you gotta do!

10

Yeah, if I were to configure each one my employer is specific to the point it took 4 hours to create this file and some labs have 10 stand alone pc’s. I have multiple labs across 200 acres some have servers with a LAN some don’t. I tried that link yesterday and this morning it won’t load for me.

My co-worker sent me an email saying to put the file in the Administrative Tools folder once it’s there do I run gpupdate /force or is that the wrong place for it?

11

I can close this thread with I just created a GPO in ADUC and linked it where I needed it, the pc’s are locked down like Fort Knox they can’t even right click.