Windows 10: LGPO backup is inconsistent with applied policies

Hello microsoft community, I have a question regarding the LGPO tool.I am trying to create a set of policies to apply across many machines automatically, so to get started I've been playing around manually. I've downloaded the LGPO tool and made some manual configurations to my local policies in the graphical Local Group Policy Editor - specifically setting the password history and minimum and maximum password ages at Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy. Then, I tried to extract those policies after applying them with the followin

:)

 

LGPO-– Local Group Policy Object Utility

Dear Team,

Good Morning!!

Currently I am using LGPO tool for Group Policy Backup and Restore. I need help me on Registry Settings Backup Parameters list.

LGPO tool which Group Policy Settings taking backup, So I need a complete list of Registry Settings which are getting Backed up during Group Policy Backup through LGPO tool.

May I request you to please do the needful.

Awaiting for your valuable response.

Thank you in Advance.

Best Regards,

 

LGPO-– Local Group Policy Object Utility

Hi,



Thank you for writing to Microsoft Community Forums.



We understand your concern, as you are using LGPO tool for Group Policy Backup and Restore and similarly you are looking for an option/tool that helps in Registry Settings Backup Parameters list.



However, we would suggest you to post your query in
TechNet forums, where we have experts and support professionals who are well
equipped with the knowledge on Registry settings backup parameters to assist you with the appropriate troubleshooting steps.



Aditya Roy

Microsoft Community – Moderator

 

Backup/Transfer Local User Group Policy?

OS: Windows 10 Pro (version 2004)

I have been going crazy trying to figure out how to backup and transfer a user group-only policy without using a domain. I need to be able to setup a policy for non-administrators and use all the same setting configurations on dozens of computers that are not networked together or using a domain with a central policy, it has to be local-only.

So I found a program by Microsoft called LGPO which backs up a local group policy and allows you to import it onto another computer but I have to verify it does not backup the SID, because some day these machines will be on the same network which is why I bare metal cloned a sysprepped base image before trying to apply this policy.

The problem I am running into is that when I make changes to the "User Configuration" in the group policy editor it affects the users in the Administrators group as if I was applying them to "Computer Configuration" because there is no way for me to specify which user groups I want the policy applied to.

I was going to try messing with Group Policy Management Console but its missing from Windows Administrative Tools in Windows 10 Pro. The other method I found was opening a console window (MMC) and adding snap-ins (Group Policy Object Editor). Then clicking browse under group policy object, selecting the users tab and select the group I want to apply the policy to. This generates a GPO (Local Computer\Non-Administrators Policy) that I can then make changes to the way I would in policy editor. This works, and if I run the command "gpupdate /boot" it applies this policy to only non-administrators. The thing is I can not export this object out of console, it only gives me an option to "export list" and if I run LGPO to back it up it does not work. I noticed after the policy is applied if I look in the group policy editor the settings are not reflected there under "User Configuration" which must be why LGPO is not backing up the non-administrators policy even after it has updated and is working correctly. I also tried to save the console and open it on another computer but the settings are not saved.

So I need to either figure out how to get LGPO to backup the non-administrators policy or figure out how to make changes to user groups within group policy editor. Seems like this is a feature of the Group Policy Management Console but I was not able to add it to Windows 10 Pro with the add/remove features method.

*Banghead

Please help!