Jump to content
Welcome to our new Citrix community!
  • Migrating GPOs to WEM with Virtual Engine Toolkit


    cugcblogs

    brandonmitchellrnd.png by Brandon Mitchell

    In the past, I’ve spent countless hours trying to translate ADMX/ADML files into corresponding registry settings. So it’s welcome that Citrix WEM Service and WEM v1909 on-premises introduce the ability to migrate GPO settings to WEM. You can read about it here Support for migrating Group Policy Objects (GPOs) from the Citrix docs and here Migrating GPO settings to WEM from James Kindon’s blog. Being able to migrate GPOs to WEM is a step in the right direction, but falls a little short for admins that don’t have access to administer GPOs. One of the use-cases for using WEM is for administrators that don’t have rights to author GPOs. For those that have administrator access to author GPOs, this blog may find you a day late and a dollar short, but I’d like to share with you an alternative using an older but reliable free tool called Virtual Engine Toolkit (VET). VET uses the POL file from either local policy or domain policy and converts either policy into a REG file that can import into a user environment manager like WEM.

    After downloading VET, install with the default settings. (Note: You’ll have to register and login to the site to obtain the download.) 

    If you’re using a Local Policy, copy all desired ADMX files into C:\Windows\PolicyDefinitions

    If you’re using a Domain Policy copy all desired ADMX files into \\[domain]\SYSVOL\[domain]\policies\PolicyDefinitions.

    Make your desired policy changes either via the Local Policy or Domain Policy. You can make as few or as many policy setting as you desire.

    mitchell090819-01.png.91ce548baeb2f292f79c9130e0237776.png

     

    If you’re using a Local Policy, locate the POL file here C:\Windows\System32\GroupPolicy\User\Registry.pol

     

    If you’re using a Domain Policy, find the Unique ID for your GPO from the Settings tab of your GPO in the GPMC. Locate the Domain Policy POL file \\[domain]\SYSVOL\[domain]\Policies\[unique ID]\User\Registry.pol.

     

    mitchell090819-02.png.d4fe6f754ce530b55343b31911ae6fbf.png

    Launch VET and navigate to the “Convert POL” tab.

    mitchell090819-03.png.afcd6e4983131090233d0b955ac0d8fc.png

    In the “Input Options” section “POL File Location” enter the path for either your local or domain POL file and select “User Policy” as the “Policy Type.”

     

    • Local Policy POL File Location mitchell090819-04.png.6cc6ecb29f525674c05b1be988acca2e.png
    • Domain Policy POL File Location mitchell090819-05.png.ceef66179ae8d569553a94839d3e8a9b.png
    • In the “Output Options” supply a “REG File Output Location” and “REG Output Filename.” mitchell090819-06.png.2d937090bda9d4e4757af566b04d1748.png

    Once populated, click the orb button in the lower right to output the registry file.  The REG file will include all settings from either the Local Policy or Domain Policy POL file.

    mitchell090819-08.png.d6c017a6c85e0e8a157717bb00bb06c6.png

     

    From here follow the same steps you’d follow to import a REG file into WEM.  From the WEM Admin Console navigate to the actions node, select registry, from the ribbon bar select “Import Registry File.”

    mitchell090819-09.png.c4f6661160a500d9c2748c35bb71adb2.png

    Browse to the saved REG file, click “Scan” and “Import Selected.”  You’ll be able to add assignments of the registry setting just like any other registry setting.

    mitchell090819-10.png.11040414f0ce53630821aeb7c2f91508.png

    When compared to the new capabilities of WEM to migrate GPOs to WEM this process falls short as it’s limited to Administrative Templates (ADMX) and cannot import GPPs or other Windows settings like Folder Redirection. This process is great if you don’t have the rights to Domain Policies or you want a quick and dirty way to create a REG file for WEM from a Local Policy. Ultimately, I’d like to see Citrix add the ability to import ADM/ADMX files directly into WEM without the need of importing/exporting or using a third-party tool, but for now at least we have options.​​


    User Feedback

    Recommended Comments

    There are no comments to display.



    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now

×
×
  • Create New...