Automating Local Group Policy on Windows

LGPO (Local Group Policy Object) is a command-line utility developed by Microsoft that allows you to automate local group policy settings on Windows machines.

Prerequisites

1. Download a GPO to import (e.g., DoD STIG GPOs)
   • If you're installing from DoD, scroll all the way down and download "Group Policy Objects (GPOs) - ..."
   • If the DoD site doesn't show the GPOs, keep on refreshing
2. Install the LGPO tool
   1. Click "Download"
   2. Select "LGPO.zip" and click "Download"

Usage

1. Extract the GPO folder
   • For DoD GPOs, locate the subfolder that matches your OS and extract the GPO folder
2. Extract the LGPO.exe from the downloaded LGPO.zip file
3. Open Command Prompt as Administrator
4. Run the command

path/to/LGPO.exe /g path/to/GPO_FOLDER

Example

C:/Users/eleven/Downloads/LGPO/LGPO.exe /g C:/Users/eleven/Downloads/GPO