Get-GPResultantSetOfPolicy -Computer dc1 -ReportType HTML -Path c:\temp\dc1rsop. Invoke-GPUpdate -Computer "ad\server1" -Target "User" Remove-GPRegistryValue -Name "My Own GPO" -Key "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" -ValueName ScreenSaveTimeOut Get-GPRegistryValue -Name "My Own GPO" -Key "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" Set-GPRegistryValue -Name "My Own GPO" -Key "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" -ValueName ScreenSaveTimeOut -Type DWord -Value 300 Get-GPO -Name "My Own GPO" | Get-GPOReport -ReportType HTML -Path c:\temp\report.html Click This computer to edit the Local Group. In the Select Group Policy Object dialog box, click Browse. In the Add or Remove Snap-ins dialog box, click Local Group Policy Editor, and then click Add. On the Apps screen, type mmc, and then press ENTER. On the Start screen, click the Apps arrow. Remove-GPLink -Name "My Own GPO" -Target "ou=clients,dc=ad,dc=contoso,dc=com" To open the Local Group Policy Editor as a snap-in. New-GPO -Name "My Own GPO" | New-GPLink -Target "ou=clients,dc=ad,dc=contoso,dc=com" The most important ones: New-GPO -Name "My Own GPO" -Comment "This is a new GPO for me"
You can easily list them by using Get-Command -Module GroupPolicy There are several CmdLets that can be used to manipulate GPOs (Create, Get-Info.
0 kommentar(er)
