Hi Does anyone know if there's a way to programmatically "generate" a GPO for pushing certain custom registry settings to different groups of computers? I know that one can use a custom Administrative Template to define custom registry settings to be managed thru the GPMC console. But this still require an Admin to manually create a GPO, select specific values to each setting, and to link this GPO to target AD groups. Is there a way for me to write a program/script to generate a GPO that pre-assigns specific values to these registry settings and deposit it into an AD domain controller, so that an Admin can simply look for this GPO on the GPMC and link it to specific AD groups to distribute these settings out? Thanks and regards, CM
Can't say there isn't ANY way but there is no API for generating GPOs from MSFT. You would need to figure out the file formats, etc and put it together yourself. The scriptable API that comes with GPMC just allows for managing the GPO links, etc - not creating or modifying GPO content. Basically the part that you want an admin to do in GPMC is the part that MSFT supports writing code for... -- Joe Richards Microsoft MVP Windows Server Directory Services Author of O'Reilly Active Directory Third Edition www.joeware.net ---O'Reilly Active Directory Third Edition now available--- http://www.joeware.net/win/ad3e.htm C Low wrote: > Hi > > Does anyone know if there's a way to programmatically "generate" a GPO for > pushing certain custom registry settings to different groups of computers? > > I know that one can use a custom Administrative Template to define custom > registry settings to be managed thru the GPMC console. But this still > require an Admin to manually create a GPO, select specific values to each > setting, and to link this GPO to target AD groups. > > Is there a way for me to write a program/script to generate a GPO that > pre-assigns specific values to these registry settings and deposit it into > an AD domain controller, so that an Admin can simply look for this GPO on > the GPMC and link it to specific AD groups to distribute these settings out? > > > Thanks and regards, > > CM > > > >
