Active Directory Administration Cookbook

Roll-out the security settings to all domain controllers using Group Policy

Run the following command line on an elevated Command Prompt (cmd.exe) to convert the settings file into a Group Policy Object:

scwcmd.exe transform /p:"C:\Windows\security\msscw\Policies\test.xml" /g:"Domain Controller Security Settings"

The preceding command creates the Group Policy with the name Domain Controller Security Settings.

Next, link the new Group Policy object to the Domain Controllers Organizational Unit (OU), using the following steps:

1. Open the Group Policy Management Console (gpmc.msc).
2. In the left navigation pane, expand the Forest node.
3. Expand the Domains node, and then navigate to the domain where you want to link the GPO.
4. Expand the domain name. ...