Forge Home


Local Group Policy Editor


37,419 latest version

2.1 quality score

Version information

  • 1.1.0 (latest)
  • 1.0.0
  • 0.1.0
released Oct 9th 2014

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'cannonps-local_group_policy', '1.1.0'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add cannonps-local_group_policy
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install cannonps-local_group_policy --version 1.1.0

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.



cannonps/local_group_policy — version 1.1.0 Oct 9th 2014

Puppet Local Group Policy (Windows)

create by Paul Cannon at email paulscannon at gmail dot com

Local_security_policy features

If you want to leave the options as default, please do not fill in. The module will pull the default value from microsoft standards.

This module uses types and providers to list, update, validate settings


The title and name of the resources is exact match of what is in secedit GUI. If you are uncertain of the setting name and values just user 'resource' to pipe them all into a file and make adjustments as necessary. The block will look like this.

local_group_policy { 'Specify intranet Microsoft update service location': <- Name exactly like the GPO
   ensure = > 'present',    <- Always present
   policy_settings => {     <- This is an area with the options listed in the group policy editor 
      'Set the intranet statistics server:' => '',    
      'Set the intranet update service for detecting updates:' => '',  

For some values this will be actual value and not human readable value. For instance: If GPO has a value of "3 - Tuesday", the actual value is likely 3. One thing built in is that if there are values that are not defined in the manifest already in the local policy. The module should simply inject the new definition into the GPO.

Listing all settings

Show all local_group_policy resources available on server. Note this will only list the policies that are currently set and not the X number of thousand policies that Microsoft makes available.

puppet resource local_group_policy

Show a single local_security_policy resources available on server. Currently this most be something already set on the server. I am working on providing the defaults back for any setting

puppet resource local_security_policy 'Specify intranet Microsoft update service location'

More examples