I need to change the local group policy on just our Windows 7 machines in an envronment that has Windows 7 and Windows XP Pro machines. The group policy I need to change is in Computer Configuration, Windows Settings, Security Settings, Local Policies and then Security Options. I need to change Network Security: Configure encryption types allowed for kerberos. My question is what is the best way to automate this process, as we have 40 plus Windows 7 machines spread out over 4 different offices? I'm sorry I forgot to mention these machines are in a 2003 domain.

I'm assuming there isn't a domain you can set the policy on then? I would look into powershell. I believe it has the commands you are looking for and you could then just push a script to run and configure everything that way.

Hi, Thanks for posting in Microsoft TechNet forums. The above policy is supported on at least Windows 7 or Windows Server 2008 R2. As your domain is Windows Server 2003 Domain, you may need to upgrade to Windows Server 2008 R2 and deploy it to Windows 7 computers. Alternatively, you need to manually configure each Windows 7 machine to use this group policy, or as Gebauer said that you can push a script. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.