This script was originally designed to be deployed in a production environment and a number of the options are geared towards setting up a new setup of Group Policies for a new deployment either in an existing or new environment. The script has been tested thoroughly, but it is recommended that prior to deploying in a production environment a few tests runs be performed in a lab environment. Please take note of the following items.
- A number of example settings are included in each section that is setup to deploy GP and GPP. To add additional GP's, just add an additional line with the desired setting.
- Adding a GPP takes a little more patience, but it is straight forward. Each GPP section builds a multi-dimensional array of values that is passed on to the Create_XML function. To add an additional GPP, find the last GPP in a section.
- Add a Generate_GUIDDATE line to run a function that creates new GUID's and updates the current time and date.
- Create a new line starting with $XMLItemValues += or paste an existing line of the appropriate GPP settings and and modify as desired.
By default the script does not enable the Protect object from accidental deletion for objects created in AD.
It would be very cumbersome in a test environment to delete objects if this was enabled. If the script is being run in a production environment, check this option to ensure that Protect object from accidental deletion is enabled for created AD objects.
Options identifies which items are geared towards a production deployment. Regardless of deployment, the script automatically generates a backup ZIP file of the generated Group Policy objects that can be restored to a production environment following these steps.
- Unzip the ZIP file containing the export GPO's to a location
- Launch Group Policy Management Console. Select Group Policy Objects and then right click in the blank area to the right and choose Maange Backups.
- Browse to the location that the backup was extracted to and one at a time highlight each policy and choose Restore.
- Click OK.
