LGPO.exe - Local Group Policy Object Utility, v1.0

LGPO.exe is a new command-line utility to automate the management of local group policy. It replaces the no-longer-maintained LocalGPO tool that shipped with the Security Compliance Manager (SCM), and the Apply_LGPO_Delta and ImportRegPol tools.

Features:

• Import settings into local group policy from GPO backups or from individual policy component files, including Registry Policy (registry.pol), security templates, and advanced auditing CSV files.
• Export local policy to a GPO backup.
• Parse a Registry Policy (registry.pol) file to readable "LGPO text" directly to the console or redirected to a file which can edited and imported into local policy.
• Build a new Registry Policy (registry.pol) file from "LGPO text".
• Enable group policy client side extensions for local policy processing.

LGPO.exe can be downloaded from the Security Guidance blog:

https://blogs.technet.com/b/secguide/archive/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0.aspx

Comments

• Anonymous
  January 21, 2016
  How would one go about using this tool to import GPO settings from the USGCB found here: http://usgcb.nist.gov/usgcb/microsoft/download_win7.html
  • Anonymous
    February 09, 2016
    Download the GPOs and expand the .zip file. "LGPO.exe /g" will import all the settings in the GPOs.
• Anonymous
  September 20, 2016
  Hello, Thank you for your post !I was using the "/compare" option of the localGPO.wsf tool.Do you have any idea how to perform this task now ?[Aaron Margosis] Policy Analyzer
  • Anonymous
    September 25, 2016
    Thanks for your reply ! I saw this (cool) tool too, but i would update a powerhsell script which uses the old "/compare" option.So, according to your reply (Policy Analyzer post: Patrik's comment from Jan 30 2016), I will try to automate the comparison with the ".exe" programs available. Can you tell me, if a "compare option" is in preparation for script use ?Thank you in advance.