# 用舊版政府組態基準(GCB)套用到新版GCB 修改LocalGPO檔案的方法

政府組態基準 GCB Server 2022 還沒出，為了盡早讓機器能測試，我選擇拿 2019 改成 2022，需要修改修改localgpo的檔案，這邊依照官方的方法加上我自己的實作過程。

## 先參考 GCB 安裝教學
https://download.nics.nat.gov.tw/UploadFile/attachfilegcb/111%E5%B9%B4GCB%E5%AF%A6%E4%BD%9C%E6%96%87%E4%BB%B6_Windows%20Server%202019v1.0_1111226.pdf
下載完GCB的設定檔和，安裝好 localGPO之後，開始修改設定

---

## 大約在上面PDF 60頁 這邊開始 使用LocalGPO部署GPO(7/13) 這邊開始會有不同

下載LocalGPO.wsf，搜尋這一段字

因為 ```Left(strOpVer,3) = "6.3"``` 代表會檢查是否為可相容的 windows 參考了微軟的版本編號資訊如下之後，把它改成``` Left(strOpVer,3) = "6.3"```

### Microsoft Operating System Versions
Operating system	Version Number
Windows Server 2022	10.0
Windows 11	10.0
Windows Server 2019	10.0
Windows 10	10.0

修改成下面的片段

'Checks whether the operating system is Windows XP or _
'Windows Server 2003 or Windows Vista or Windows Server 2008 or _
'Windows 7 or Windows Server 2008 R2 or Windows 8 or Windows Server 8

If(Left(strOpVer,3) = "10.") and (strProductType <> "1") then
strOS = "WS12"
ElseIf(Left(strOpVer,3) = "6.2") and (strProductType <> "1") then
strOS = "WS12"
ElseIf(Left(strOpVer,3) = "6.2") and (strProductType = "1") then

---

## 打開 LocalGPO程式

開啟 LocalGPO資料夾，用系統管理員身分開啟 command-line here.cmd 
![](https://hackmd.io/_uploads/SJUGHmhA3.png)

cscript LocalGPO.wsf /path:"C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}"

---

## 指令執行後的樣子範例

C:\Program Files (x86)\LocalGPO>cscript LocalGPO.wsf /path:"C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}"

Microsoft (R) Windows Script Host Version 5.812
Copyright (C) Microsoft Corp. 1996-2006, 著作權所有，並保留一切權利

Modifying Local Policy... this process can take a few moments.

Applied valid INF from C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}
Applied valid Machine POL from C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}
Applied valid User POL from C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}
Applied valid Audit Policy CSV from C:\GCB 2022\GCB-WindowsServer2019-gposv1.1_1120306 (1)\WindowsServer2019CommonSettings\{55CBA3EB-6696-42BD-A3DD-D8ADA4C26A59}

Local Policy Modified!

Please restart the computer to refresh the Local Policy

C:\Program Files (x86)\LocalGPO>gpupdate /force

正在更新原則...

電腦原則更新已成功完成。
使用者原則更新已成功完成。