Moving GPO user settings to computer settings using Powershell?

27 views
Skip to first unread message

Mike Leone

unread,
May 31, 2024, 12:35:31 PM5/31/24
to NTPowershell Mailing List
We have this GPO. It mostly has computer settings in it. However, it's also got a lot of printer mappings, but entered in the user section. I know that ideally a GPO should have only one or the other, and I'd like to try to keep to that.

However, I can't seem to just cut and paste out the printer mappings from the user to the computer section. Is there a way I could do it with PS? Read in the user entry, and duplicate it under the computer entry?

The settings in question are printer mappings, targeting the computer being a member of a specific AD group. (that way, whoever sits at that computer, they can print to the printer nearest to the computer. That's the idea, anyway ....)

I really don't want to re-create all these mappings (there are well over 100, since the computers are in multiple departments in the OU this is linked to.

Any easy to do this? Maybe using PS to read in the GPO? (sez he, hopefully)

Thanks

--

Mike. Leone, <mailto:tur...@mike-leone.com>

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos>

Michael B. Smith

unread,
May 31, 2024, 12:58:09 PM5/31/24
to ntpowe...@googlegroups.com

If you drill down into sysvol, it’s all stored in a XML file. You could rip-and-replace it into a new GPO. I personally don’t know of any free software that can rip-and-replace for you. You might take a look at SDM Software and see what they’ve got.

--
You received this message because you are subscribed to the Google Groups "ntpowershell" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntpowershell...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntpowershell/CAHBr%2B%2BhsyCe-m5Mdk2UU6K0Oov04YLu_edNcP5e8gOyGnLQNvw%40mail.gmail.com.

Markus Klocker

unread,
Jun 3, 2024, 2:11:53 AM6/3/24
to ntpowe...@googlegroups.com
There are many ways from security filtering over to login script to loopback processing.
imho a clone of that GPO with security filtering could do the trick.

Printing seems to be one of the most complex issues out there :)

    Markus
Reply all
Reply to author
Forward
0 new messages