Moving local group and security policies to my domain controller

[LCSK]

Hi, I have ordered six Windows 10 PCs and a Synology DS216+II. I intend to use the latter as a domain controller by taking advantage of Synology's Active Directory Server package. Unfortunately, I will have the PCs much sooner than the DS216+II so my plan is to:

1. build one of the six PCs, having set a local group policy using the Local Group Policy Editor;
2. image it and deploy its image to the remaining five;
3. once my DS216+II arrives, join the machines to my domain;
4. import the local policy from one of the six machines into AD and;
5. manage it centrally from thereon out.

Only I've never defined a local group policy before, nor have I ever administered a domain, and I'm not sure if what I'm proposing is even possible and, if it is, whether it's the most sensible approach? As an aside, I've also noticed there's a Local Security Policy Editor. Is there value to defining a local security policy too and moving it over, along with the local group policy, once the DS216+II arrives?

Finally, as someone who's never previously administered a domain... is there anything else I should know about or take advantage of? Thanks

[shaithis]

1.) Open %systemroot%\system32\grouppolicy Within this folder, there are two folders - “machine” and “user”. Copy these to folders to the “%systemroot%\system32\grouppolicy - folder on the target machine. Restart the machine or run GPUPDATE /force

Note :- %systemroot%\system32\grouppolicy is a hidden folder. You need to set an option to view hidden folder in explorer.

2) Use Security Configuration Tool Refer following link.. http://technet.microsoft.com/en-us/l.../bb742512.aspx

Its been a while since I did anything like this and not sure if the Synology DC emulator will work differently as I've never used/seen it.