Windows 10 Group policy for the entire domain

I am Implementing a workstation 10 security Group policy according to C.I.S standards. I have the settings configured on a windows 10 box but they are "local computer policy" how do I export the policy into a domain group policy?
iamuserAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

carlos sotoIT AdministratorCommented:
hi

maybe this can help Local to Domain GPO
0
iamuserAuthor Commented:
thanks, the question I have then is this, will the workstation specific settings be available for editing once I load the policy into the domain?
0
carlos sotoIT AdministratorCommented:
Not shure i understand your question correclty but a domain GPO overrides a local GPO, if there is a conflict.
If you mean that you want to apply a specific policy to a specific computer through a domain GPO as you did with the local GPO, then yes
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

iamuserAuthor Commented:
My Domain level is 2008 R2, I have 2 win 2012 Domain controller and 1 2008 R2 domain controller.

So I looked at the link and you can only export the security portion of the local group policy into the domain. here's the problem, on the local workstation 10 security policy (in administrative templates, services) there is an Internet information service setting, "prevent IIS installation". That setting does not exist in the domain policy and I cannot edit such setting.

I also cannot export the administrative template from the workstation policy. So how do i get this setting into the domain policy?
0
McKnifeCommented:
Install RSAT on win10, start GPMC on win10, connect to your DC, voila, there you have your setting.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
iamuserAuthor Commented:
Thanks for all the help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.