You can use LocalGPO to modify the local Group Policy of a computer by applying the security settings included in the GPOs. LocalGPO applies the security setting values recommended in this Help to modify the local policy. The tool does this by importing the settings from a GPO backup into the local Group Policy. Use SCM to generate the GPO backup for the desired baseline.

To export a GPO backup file to the local Group Policy

  1. Log on to the computer as an administrator.
  2. On the computer, click Start, click All Programs, and then open the LocalGPO folder.
  3. In the LocalGPO folder, right-click LocalGPO, and then choose Run as administrator to open the tool command prompt with full administrative privileges.
    Note   If prompted for logon credentials, type your user name and password, and then press Enter.
  4. At the command prompt, type cscript LocalGPO.wsf /Path:<path> and then press Enter where <path> is the path to the GPO backup.

Completing this procedure modifies the local security policy settings using the values included in the GPO backup. You can use GPEdit.msc to review the configuration of the local Group Policy on your computer.

To restore local Group Policy to the default settings

  1. Log on to the computer as an administrator.
  2. On the computer, click Start, click All Programs, and then open the LocalGPO folder.
  3. In the LocalGPO folder, right-click LocalGPO, and then choose Run as administrator to open the tool command prompt with full administrative privileges.
    Note   If prompted for logon credentials, type your user name and password, and then press Enter.
  4. At the command prompt, type cscript LocalGPO.wsf /Restore, and then press Enter.

Completing this procedure restores all local policy settings to their default values.