Migrating GPOs to RES Workspace Manager (Part 4)

Here is the story thus far. In Part 1 we discussed the issues with the RES Workspace Manager implementation of ADM/X templates and whether this is a good or a bad thing. The answer is, “it depends!” Part 2 detailed the locations of the existing Group Policy Objects (GPOs) and the REGISTRY.POL files. The last post (Part 3) we explored the REGISTRY.POL file format and the available options for extracting the resulting registry settings stored within.

Hail the release of the updated/new Virtual Engine Toolkit BETA 2 (registration required)! This update now incorporates the ability to create a .REG file from the GPO REGISTRY.POL file that we can import directly into RES Workspace Manager. We lose the ability to browse the ADM/ADMX structure hierarchy and view the explanations, but we do now have the ability to import existing GPOs without having to manually transition the settings!

Note: This is still a Beta product so please be careful and test, test and test again! If you have any issues please use the contact form on the website.

To migrate a GPO you will need to know where it is located and which REGISTRY.POL file to use and to add to the confusion all GPOs have a REGISTRY.POL file. To locate the correct REGISTRY.POL to import we  first need to find the GUID of the existing GPO:

  1. Open the Group Policy Management Console.
  2. Locate and edit the GPO we wish to migrate.
  3. Right click the <GPO NAME> in the left hand pane and select Properties from the resulting context menu.
  4. The GPO’s GUID will be displayed next the Unique Name entry (highlighted below).

image

Now we have the GPO’s GUID we can locate the correct REGISTRY.POL by performing the following:

  1. Launch the Virtual Engine Toolkit and select the “Convert POLs” tab.
  2. Click the ‘…’ button to browse for the REGISTRY.POL file (next to the .POL File Location text box).
  3. Open the ‘\\<DOMAIN FQDN>\SYSVOL\<DOMAIN FQDN>\Policies’ folder.
  4. Select the folder that matches the GPO GUID found earlier.
  5. Open the ‘User’ folder (this contains the User Configuration settings of the GPO).
  6. Select the ‘REGISTRY.POL’ file.
  7. Select an output location to save the .REG file in the ‘REG File Output Location’ text box.
  8. Give the file a name in the ‘REG Output Filename’ text box (the .REG extension will be added automagically).

It might look a little like this:

image

Note: It is possible to import the Machine (Computer Configuration container) REGISTRY.POL file and there are no checks enforced to stop you doing this. Within the REGISTRY.POL file is nothing to define whether the registry settings are User or Machine based, i.e. no HKLM or HKCU differentiators. The Virtual Engine Toolkit assumes that they’re User based and adds the HKCU text to the resulting .REG file manually.

Click the green “Toolkit” icon to create the .REG file. If all is well you should see something like this:

image

Now we can create a new Registry configuration object and import our .REG file into the RES Workspace Manager Management Console. If you browse the registry settings you should see that the resulting GPO settings have been migrated, in place exactly as they where configured in the GPO!

image

5 Comments

  1. Robert Kadish Author July 1, 2011 (12:29 pm)

    Ian,

    Great work on this! We used this the other day at a customer site. Imported and applied 150 objects, and were up and running in 5 minutes. Login’s went from 90 seconds to 10 seconds!

  2. Iain Brighton Author July 1, 2011 (12:42 pm)

    Robert,

    That’s great news! Please be aware of the import bug in Workspace Manager detailed here: http://virtualengine.co.uk/2011/res-workspace-manager-registry-import-bug/.

    The Release Candidate for the toolkit will be out shortly and contains a GPO conversion wizard that will convert multiple GPOs in one pass!

    Iain

Trackbacks & Pingbacks

  1. Tweets that mention Migrating GPOs to RES Workspace Manager (Part 4) | Virtual Engine -- Topsy.com December 7, 2010 (9:35 pm)

    […] This post was mentioned on Twitter by RES Software, Iain Brighton. Iain Brighton said: New Virtual Engine blog post: Migrating GPOs to #RES #Workspace Manager Part 4 – http://ht.ly/3lcgs […]

  2. Moving away from windows profiles and group policy objects « plextech October 22, 2011 (2:50 pm)

    […] out Virtual Engine for a nifty tool currently in Beta that allows you to migrate GPO to […]

  3. FREE: Workspace Manager Express – A roaming user profiles alternative - 4sysops November 26, 2011 (5:05 am)

    […] out Virtual Engine for another free nifty tool currently in Beta that allows you to migrate GPO to […]

Leave a Reply

Archives

Categories