Defaultzlq GPO Tool

LocalGPO.msi - Excellent MS Tool

Microsoft_Security_Compliance_Manager_Setup.exe – The Microsoft Security Compliance Manager allows you to view, update, and export security baselines.

LocalGPO.msi – This tool is designed to manage local group policies of a computer such as applying a security baseline and exporting the local Group Policy.

Local GPO can do the below activities:

  1. It can backup your local GPO to a GPMC formatted backup. Which means you could backup a local GPO and then use GPMC to import it into a domain-based GPO.
  1. It can take a GPMC backup of GP settings and import them into a local GPO on a machine.
  1. It can restore a local GPO to its default state.

How to use each function of this tool:

For backing up the local GPO, the syntax is simple:
From command-line here.cmd (open this cmd from the Local GPO folder), and simply type:
cscript LocalGPO.wsf /path:c:gpbackups /export
Where c:gpbackups is a path to where I want to store my backup and /export tells the script to export my local GPO settings.
Now if we want to import a GPMC backup or exported GP object from another stand-alone server into my local GPO, the syntax is even easier. you simply have to provide the path to the GUID-Named folder that GPMC creates under the backup directory when you back up a GPO, like this:
cscript LocalGPO.wsf /path:C:gpbackups{42ADD8FE-EDF6-479B-92C6-557343D8D091}
And, to restore a local GPO to its default config:
cscript LocalGPO.wsf /restore