Group policy for multiple standalone Windows 7 Pro PCs

Hi all,

We have about 50 standalone Windows 7 Pro PCs in various locations.  For whatever reason, they are not on a domain, and won't be any time soon.  The PCs need IE to be configured in a certain way for a particular application to work, and also for Adobe Reader to be a certain version.

I have been told that group policy for individual PCs is no problem.  I have Googled this but I can't find a 'for dummies' guide anywhere.

Could someone please point me in the right direction or explain from the first step, what I need to do to be able to create and deploy a group policy to each PC?

Thanks,

Paul
paulc2000Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jeremy WeisingerSenior Network Consultant / EngineerCommented:
There is no group policy for non domain joined computers. There is a local policy but you need to edit it on each machine.
0
kulboyCommented:
For IE i think it is possible to export registry settings.  On the target you could import these settings to have a good configuration.  (i didn't test it :) )
check these keys to find out what you need to export on the working computer:
https://msdn.microsoft.com/en-us/library/dn479870.aspx
0
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
Alternatively you can edit the registry on one PC for the setting you required and export that registry key and save it to a file  (eg. IEConfig.reg)
 Copy IEConfig.reg on a CD and run the IEConfig.reg file on the local PC individually visiting the PC.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

Benjamin VoglarIT ProCommented:
Adobe Reader can be updated with Ninite PRO

https://ninite.com/pro

IE - export Local IE policy and Import them to another PC.
0
Gabriel CliftonNet AdminCommented:
Instead of group policy, you can set local policy and copy it to other computers.

1.) Open Local Group Policy Editor (gpedit.msc) and set your policies.
2.) Open %systemroot%\system32\grouppolicy\ Within this folder, there are two folders - “machine” and “user”. Copy these to folders to the “%systemroot%\system32\grouppolicy - folder on the target machine. Restart the machine or run GPUPDATE /force

Note :- %systemroot%\system32\grouppolicy is a hidden folder. You need to set an option to view hidden folder in explorer.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kulboyCommented:
@Gabriel Clifton
All group policies will be copied this way from one machine to the other, not only IE settings..
0
Gabriel CliftonNet AdminCommented:
@kulboy
Exactly, those are not on the domain, will not get domain policies, so you can set local policies any way you want as far as restrictions, programs, etc and just copy to the other computers. As effective as domain group policy, now more convenient.
0
paulc2000Author Commented:
Thanks all for your comments.

I read elsewhere that MS Security Compliance Manager can be used for this purpose.  I think I can see how I would export the IE settings, but I don't know how I would import them to the next PC, without having to install SCM on that PC also.

Is there no way to just cleanly export IE settings (all of them, but not other Windows settings), then import them on the next PC?

Or if someone knows the steps to follow in SCM, that would be great too.  

Thanks,

Paul
0
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
You can use scripting (Powershell script) to configure IE settings based on your requirement and run it on the PCs.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.