Windows 10: Keeping/ reinstating local group Policies for specific user after Sysprep

Hello,I am trying to sysprep a Windows 10 LTSC 2019 image while preserving local group policies I created for a specific user [REM]. I am not sure whether there is a way to preserve local group policies during sysprep with custom unattend options.Otherwise, it would be great if there was a way to either backup/restore local group policies for specific users somehow, or if that isnt possible set local group policies for specific users with a powershell script.I would greatly appreciate any help. I tried looking for similiar solutions for days but sadly this seems to be a very specific issue.

:)

 

Delete MMC Group Policy for specific user?

Hello Mark, *Smile

Were you wanting to undo policies applied to this specific user from the MSC?

If so, open the MSC created for this specific user, set all configured policies back to the default Not Configured, and delete the MSC file.

*Arrow Apply Local Group Policy to Specific User in Windows 10

 

Local group policy -user specific

Trying to move the local group policy I set up on one of my Windows 10 laptops to all my other windows 10 laptops.

 

Backup/Transfer Local User Group Policy?

OS: Windows 10 Pro (version 2004)

I have been going crazy trying to figure out how to backup and transfer a user group-only policy without using a domain. I need to be able to setup a policy for non-administrators and use all the same setting configurations on dozens of computers that are not networked together or using a domain with a central policy, it has to be local-only.

So I found a program by Microsoft called LGPO which backs up a local group policy and allows you to import it onto another computer but I have to verify it does not backup the SID, because some day these machines will be on the same network which is why I bare metal cloned a sysprepped base image before trying to apply this policy.

The problem I am running into is that when I make changes to the "User Configuration" in the group policy editor it affects the users in the Administrators group as if I was applying them to "Computer Configuration" because there is no way for me to specify which user groups I want the policy applied to.

I was going to try messing with Group Policy Management Console but its missing from Windows Administrative Tools in Windows 10 Pro. The other method I found was opening a console window (MMC) and adding snap-ins (Group Policy Object Editor). Then clicking browse under group policy object, selecting the users tab and select the group I want to apply the policy to. This generates a GPO (Local Computer\Non-Administrators Policy) that I can then make changes to the way I would in policy editor. This works, and if I run the command "gpupdate /boot" it applies this policy to only non-administrators. The thing is I can not export this object out of console, it only gives me an option to "export list" and if I run LGPO to back it up it does not work. I noticed after the policy is applied if I look in the group policy editor the settings are not reflected there under "User Configuration" which must be why LGPO is not backing up the non-administrators policy even after it has updated and is working correctly. I also tried to save the console and open it on another computer but the settings are not saved.

So I need to either figure out how to get LGPO to backup the non-administrators policy or figure out how to make changes to user groups within group policy editor. Seems like this is a feature of the Group Policy Management Console but I was not able to add it to Windows 10 Pro with the add/remove features method.

*Banghead

Please help!