LGPO.exe – Local Group Policy Object Utility, v1.0


LGPO.exe is a new command-line utility to automate the management of local group policy. It replaces the no-longer-maintained LocalGPO tool that shipped with the Security Compliance Manager (SCM), and the Apply_LGPO_Delta and ImportRegPol tools.

Features:

  • Import settings into local group policy from GPO backups or from individual policy component files, including Registry Policy (registry.pol), security templates, and advanced auditing CSV files.
  • Export local policy to a GPO backup.
  • Parse a Registry Policy (registry.pol) file to readable "LGPO text" directly to the console or redirected to a file which can edited and imported into local policy.
  • Build a new Registry Policy (registry.pol) file from "LGPO text".
  • Enable group policy client side extensions for local policy processing.

LGPO.exe can be downloaded from the Security Guidance blog:

http://blogs.technet.com/b/secguide/archive/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0.aspx

 

Comments (4)

  1. Rob says:

    How would one go about using this tool to import GPO settings from the USGCB found here: http://usgcb.nist.gov/usgcb/microsoft/download_win7.html

    1. Download the GPOs and expand the .zip file. “LGPO.exe /g” will import all the settings in the GPOs.

  2. Pierrick L. says:

    Hello,

    Thank you for your post !
    I was using the “/compare” option of the localGPO.wsf tool.
    Do you have any idea how to perform this task now ?

    [Aaron Margosis] Policy Analyzer
    1. Pierrick L. says:

      Thanks for your reply !
      I saw this (cool) tool too, but i would update a powerhsell script which uses the old “/compare” option.
      So, according to your reply (Policy Analyzer post: Patrik’s comment from Jan 30 2016), I will try to automate the comparison with the “.exe” programs available.
      Can you tell me, if a “compare option” is in preparation for script use ?
      Thank you in advance.

Skip to main content