Windows Server - Can I run gpedit.msc from server on remote computer.

Asked By steve on 03-Oct-07 09:14 AM
In stead of logging into the workstation via vnc or remote desktop to
edit the gpedit.msc on that workstation, can I do it from the server,
Like you can when you are using the Computer Manager/Connect to
another computer.

How can I do this remotely from server.

Lanwench [MVP - Exchange] replied on 03-Oct-07 09:32 AM
No - it is local.

However, since you are using Active Directory, why would you be editing the
policy on any local workstation anyway? You should be using group policy
steve replied on 03-Oct-07 10:18 AM
Thank you for the information.

Well I have been struggling with a problem that needs me to run the
gpedit from the local computer. I hate haveing to vnc etc everytime.

The reason I believe you need to log on locally in this instance is
that I want to remove the users from the local login "Allow Login"
policy and add a different group to prevent all but certain groups
from being able to log in physically to that computer.

Jorge Silva replied on 03-Oct-07 10:39 AM
Yes, you can use a custom MMC console (but using a custom MMC console
Machine security settings aren't available).

So set Smachine security Settings you can use secedit, you can search at MS
site for detailed information about secedit.

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
Lanwench [MVP - Exchange] replied on 03-Oct-07 12:24 PM
What is the exact problem?

But you can do this all with group policy. Stick the workstation in its own
sub-OU and create a custom GPO for it. The group policy settings should
always supersede the local policy settings. I never like to do stuff on a
workstation that I can't control centrally.

Frankly, I'd probably just do this using AD groups - you can centrally
access the local workstation's "Users" group, remove Domain Users & add the
custom AD group.  I think that should accomplish what you wish without any
policy tweaking at all. Test it!
steve replied on 03-Oct-07 04:27 PM
Thanks all,
I will test the suggestions and get back Im sure with more questions.