如何以编程方式创建GPO？

我需要通过组策略部署我的vb.net应用程序。我在这里找到了一些关于如何在http://windowsdevcenter.com/pub/a/windows/2006/11/14/how-to-deploy-software-using-group-policy.html处执行此操作的信息。如何以编程方式创建GPO？

现在我需要做相同的编程。请在此建议一些链接，文档或教程。

来源

2012-04-04 Harsh

任何你不能使用GP GUI的理由？ – 2012-04-04 13:40:26

我需要一个用于我的客户的过程的自动化系统。这就是我需要通过组策略或任何登录脚本部署的编程方式的原因。 – Harsh 2012-04-04 13:43:30

@GeekOnDemand这比你想象的要复杂得多。我必须以编程方式创建一个软件安装gpo，并很快发现没有真正的方法来做到这一点。您*可以*使用各种库（GPMGMT）来创建一个空的GPO，但就设置实际设置而言，没有好处。您必须编辑注册表（根据所讨论的GPO，该注册表不会始终有效），或者执行以下操作：手动创建GPO，将其导出到xml文件，然后在代码中将您的XML与GPO迁移表来配置设置。丑陋但“有用”。祝你好运。 – 2012-04-04 15:13:46

好，

~~我不认为有记录API来创建GPO。您可以手动创建它，然后使用 CreateGPOLink函数将其链接到OU的~~

刚刚发现PS脚本，想创造新的GPO的，认为这可能是帮助你http://blogs.technet.com/b/heyscriptingguy/archive/2009/02/11/how-can-i-create-new-group-policy-objects.aspx

我认为你的问题在这里回答C# linking group policy in AD

来源

2012-04-04 14:11:25 Zilog

然后你必须'P/Invoke'。 OP要求'C＃'。 – 2012-04-04 14:13:24

是的，你说得对。使用interop和GPMGMT库显然有更好的方法。 – Zilog 2012-04-04 14:40:45

希望这会有所帮助。就像我说的那样，它很丑，但很有效。您可能必须安装组策略管理控制台，以便您可以添加对GPMGMTLib.dll的引用。这是直接从我的代码，所以你必须与它玩，但它应该让你在正确的方向前进：

Dim GPM As New GPMGMTLib.GPM 
Dim GPMConst As GPMGMTLib.GPMConstants = GPM.GetConstants 
Dim GPMDomain As GPMGMTLib.GPMDomain = GPM.GetDomain(Environment.GetEnvironmentVariable("USERDNSDOMAIN"), "", GPMConst.UseAnyDC) 
Dim RootDSE As New DirectoryServices.DirectoryEntry("LDAP://RootDSE") 
'Dim GPMSOM As GPMGMTLib.GPMSOM = GPMDomain.GetSOM("OU name") 'to link to specific OU 
Dim GPMSOM As GPMGMTLib.GPMSOM = GPMDomain.GetSOM(RootDSE.Properties("defaultNamingContext").Value.ToString()) '//DC=domain,DC=test 

'//======================= 
'//see if we already exist 
'//======================= 
Dim GPMSearchExisting As GPMGMTLib.GPMSearchCriteria = GPM.CreateSearchCriteria 
GPMSearchExisting.Add(GPMConst.SearchPropertyGPODisplayName, GPMGMTLib.GPMSearchOperation.opEquals, "Agent_Installation") 
Dim GPOListExisting As GPMGMTLib.GPMGPOCollection = GPMDomain.SearchGPOs(GPMSearchExisting) 
If GPOListExisting.Count <> 0 Then 
    MsgBox("GPO already exists.") 
    Exit Sub 
End If 

'//============================================================================= 
'//copy compressed GPO template from embedded resources to filesystem then unzip 
'//============================================================================= 
lblStatus.Text += "Copying embedded GPO template to filesystem..." & vbNewLine 
lblStatus.Refresh() 
My.Computer.FileSystem.WriteAllBytes("c:\Agent_Installation_GPO.zip", My.Resources.Agent_Installation_GPO, False) 
lblStatus.Text += "Extracting GPO template from archive..." & vbNewLine 
lblStatus.Refresh() 
Call UnZip("c:\Agent_Installation_GPO.zip", "c:\") 

'//========================================================================================= 
'//need to create a GPO migration table on the fly. see Create_Migration_Table() for details 
'//========================================================================================= 
lblStatus.Text += "Creating GPO migration table..." & vbNewLine 
lblStatus.Refresh() 
Call Create_Migration_Table("c:\Agent_Installation_GPO.migtable") 

lblStatus.Text += "Creating GPO..." & vbNewLine 
lblStatus.Refresh() 

Dim GPO As GPMGMTLib.GPMGPO = GPMDomain.CreateGPO 
GPO.DisplayName = "Agent_Installation" 

lblStatus.Text += "Linking GPO to domain..." & vbNewLine 
lblStatus.Refresh() 

'//=========================== 
'//links the GPO to the domain 
'//=========================== 
GPMSOM.CreateGPOLink(-1, GPO) 

Dim GPMSearchCriteria As GPMGMTLib.GPMSearchCriteria = GPM.CreateSearchCriteria 
GPMSearchCriteria.Add(GPMConst.SearchPropertyGPODisplayName, GPMGMTLib.GPMSearchOperation.opEquals, "Agent_Installation") 
Dim GPOList As GPMGMTLib.GPMGPOCollection = GPMDomain.SearchGPOs(GPMSearchCriteria) 
Dim GPMGPO As GPMGMTLib.GPMGPO = GPOList.Item(1) 

lblStatus.Text += "Importing settings from template..." & vbNewLine 
lblStatus.Refresh() 

'//======================================================== 
'//link migration table to template and import all settings 
'//======================================================== 
Dim GPMBackupDir As GPMGMTLib.GPMBackupDir = GPM.GetBackupDir("C:\Agent_Installation_GPO") 
Dim GPMBackup As GPMGMTLib.GPMBackup = GPMBackupDir.GetBackup("{193E0BEE-B37E-4472-A032-F297C4A5D8E1}") 
Dim GPMMigrationTable As GPMGMTLib.GPMMigrationTable = GPM.GetMigrationTable("c:\Agent_Installation_GPO.migtable") 
Dim GPMResult As GPMGMTLib.GPMResult = GPMGPO.Import(0, GPMBackup, GPMMigrationTable) 

lblStatus.Text += "Done" 
lblStatus.Refresh()

，和本是创建迁移表的功能。对于我的测试，我使用了test.domain，但正如你所看到的，我在合并XML之前将其替换为当前域。请注意，XML必须是utf-16或这不起作用。

Using objWriter As New System.IO.StreamWriter(strPath, False, System.Text.Encoding.Unicode) '//must be utf-16 
    objWriter.WriteLine("<?xml version=""1.0"" encoding=""utf-16""?>") 
    objWriter.WriteLine("<MigrationTable xmlns:xsi=""http://www.w3.org/2001/XMLSchema-instance"" xmlns:xsd=""http://www.w3.org/2001/XMLSchema"" xmlns=""http://www.microsoft.com/GroupPolicy/GPOOperations/MigrationTable"">") 
    objWriter.WriteLine(" <Mapping>") 
    objWriter.WriteLine(" <Type>UNCPath</Type>") 
    objWriter.WriteLine(" <Source>\\test.domain\netlogon</Source>") 
    objWriter.WriteLine(" <Destination>\\" & Environment.GetEnvironmentVariable("USERDNSDOMAIN") & "\netlogon</Destination>") 
    objWriter.WriteLine(" </Mapping>") 
    objWriter.Write("</MigrationTable>") 
    objWriter.Close() 
End Using

来源

2012-04-05 13:40:58

如何以编程方式创建GPO？

回答

相关问题