For some reason I could not get it to work.
Logged into Win 8.1 on computer 1 as admin user.
I copied the backup vbs-file to the desktop.
I ran the backup vbs-file by right click and open with command line.
I looked into the folder and it was not much files there.
I have locked the local group policy to a specific user called Kiosk.
I could not see anything in the copied user folder (even with all hidden files showing).
Checked the original folder (user) in in the win32 folder.
I could not see any file there in the user folder either.
Can anyone post a screenshots of the content for a spesific user.
I do not know whats wrong.
Î tried the neighbour folder GroupPolicyUsers and copied the content.
Noticed the folder names was filled with numbers.
And they were different.
Copied the content from the newest folder to the oldest folder.
Still no luck.
Blah, I seem to have done it...
On the computer you want to import to:
Login as admin.
Win key + R
Add new snapin module -> Local policy
Lock mit to user ("Kiosk" user in my example).
Save mmc file to desktop.
Navigate to system32 in Windows folder.
Find the hidden folder GroupPolicyUsers.
Check that another hidden folder with many characters exits.
Copy the content from the similar folder on another computer to this folder.
Overwrite all files.
Run a gpupdate /force on the admin commandline.
I needed to restart twice then it was good.
Blah, going home to relax and watch some Netflix...
Last edited by norway2015; 16 Jun 2015 at 11:00.
I've updated the .vbs files in the tutorial to help. Please download and try the new versions to see how they work for you now.
Regarding this folder: %SystemRoot%\System32\GroupPolicyUsers
(User/Group Specific GPOs Configuration)
I tried to copy a folder in this folder.
It had a lot of numbers in it.
I pasted it in the "GroupPolicyUsers" folder on another computer.
And ran a gpupdate /force and a restart.
That did not work.
I came to think this was a unique folder name for that computer.
I ran MMC, added the snapin, connected to the user "Kiosk" which is a local computer account.
I saved a empty gpo profile and it then made a similar folder, but with a slight different name.
Copied all the content from the old folder to the new folder.
Ran a gpupdate /force and had to restart at least two times.
This time it worked.
So please be observant of this.
Last edited by norway2015; 18 Jun 2015 at 03:55.
Great news Norway. Thank you for posting back with your results.
Thanks Shawn! Fixed a very messed up PC! Group Policy was successfully copied from a known good computer to a computer with a corrupted Local Group Policy and now works like a Champ. Much appreciated! Windows Update and Windows Defender are now working.
You're most welcome dprather. I'm glad it could help.
Brink, thanks for helping me to gain a basic understanding of Local Group Policy. I just wanted to share my experience using your method above to copy LGP from one computer to another.
Using these scripts to copy Local Group Policy from one Windows 7 Ultimate computer to another only partially worked. My policy had computer, user and group settings in it. Only the group settings were being applied. The computer and user settings were not being applied. 'gpresult /r' reported the reason as:
The following GPOs were not applied because they were filtered outLocal Group PolicyFiltering: Not Applied (Empty)
After doing some exhaustive investigation it appears that the gpt.ini file has some pertinent information about the policy.
Also, I've read that Domain based GPOs will not be applied if the permissions are not set correctly ( How to Implement Group Policy Security Filtering :: Windows 2003 :: Articles & Tutorials :: WindowsNetworking.com ). The Local Group Policy Editor does not have an ACL editor so I saved the ACLs from the computer I setup the LGP on and restored them after copying the entire GroupPolicy and GroupPolicyUsers directories to the destination computer. You can forgo transferring ACLs if you are copying these directories via a NTFS formatted drive (the ACLs will be preserved). Unfortunately I must use a CD to install the LGP onto the destination computers so I have to do this to preserve the ACLs.
So to transfer LGP from one computer to another I did the following. First, I copied GroupPolicy and GroupPolicyUsers to %userprofile%\Desktop\Local-Group-Policy-Backup. This can be done via Windows Explorer or command line via xcopy ('xcopy /c /e /h /k /x /o /i /q /y %SystemRoot%\System32\GroupPolicy %userprofile%\Desktop\Local-Group-Policy-Backup\GroupPolicy'). Note, I copied the entire GroupPolicy directory not just the subdirectories as the Backup script above does. Second, I saved the ACLs of the GroupPolicy and GroupPolicyUsers directories and contents (files and subdirectories) using 'icacls "%userprofile%\Desktop\Local-Group-Policy-Backup\*" /save AclFile'. Third, I burned the Local-Group-Policy-Backup directory along with the AclFile onto a CD (one could use a removable drive or a network to copy the files directly). I then copied GroupPolicy and GroupPolicyUsers onto the destination computer. The ACLs were restored to the copied files/directories using 'icacls "%SystemRoot%\System32" /restore AclFile'. Finally, I ran 'gpupdate /force'. All of the LGP settings were applied. 'gpresult /r' was showing no policies "not applied".
I hope this helps others that may experience the same problems using Brink's method.
Last edited by PaulAV; 04 Nov 2016 at 09:15.
Thank you for sharing Paul, and welcome to Eight Forums.