Export/Import GPOs between forests

[mcconmw]

Is there a way to export a GPO from one forest into another?

Scenario:
I am currently working in a lab setup trying to learn AD in anticipation of a corporate initiative to migrate to 2000. We expect to receive our DC later this year and begin the migration. While I am working in the lab, I would like to go ahead and develop all of our GPOs, but I cannot determine a way that would allow me to export these objects so that I can import them into the new structure when it arrives.

Any input is greatly appreciated. Thanks.

Mike

 

[Jpoandl]

Did you ever figure out if this is possible. I just want to export a GPO to back it up. I want to be able to restore the GPO (in an OU) if needed later.

Please let me know.. Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com

 

[mcconmw]

Not really. I just dodged the issue. I am more convinced than ever that it is possible though. I know you can use inf files to create custom settings in a GPO and I would assume that conversely you could use the same to somehow copy the GPO. I have not actually tried this. I just heard about it in a class or some reading. I also have noted that when a GPO is applied to a workstation that a temporary set of reg keys are created that dictate the settings. I don't remember the exact location, but depending on your need you might could just export these. Sorry I can't be of anymore help. If you figure it out, post it though. I would definitely be interested. Thanks.

 

[Jpoandl]

Hey check out

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/fazam2000-o.asp

Something called FAZAM 2000. The above link gives you a preview of the tool. It looks like you can backup and restore GPO's to the same domain...


Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com

 

[welshguy]

Yup joseph is right - we use it to back up policies and I'm sure it can transfer between forests - definately use it within domains.

You can even back up a policy onto floppy disk and repopulate a GPO in another domain etc. It also gives you a neat RSOP tool for troubleshooting GPO problems with clients and users and quite a lot of other stuff. - Mind you the updated gpresult that come with XP does RSOP as well.

Believe it's quite expensive though.

It does save an awful lot of time - and besides I'm not paying for it

 

[Jpoandl]

Good info... I called Microsoft the other day concerning a GPO Folder Redirection problem (The problem is Folder Redirection seems to only work once...It will not work again until the GPO is atlered. We have the option set to always force foler redirection...but its not working.) Anyway, Microsoft confirmed that there is not built-in way to export/import GPO's.

The evaluation version of Fazam does not allow you to do much. So I guess you'll have to buy the full version.

Talk to you later... Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com

 

[welshguy]

Joseph,

The dreaded folder redirection - it's a nightmare !!
I think if I remember correctly that it is the fact that the FR policy setting is applied only the first time a user logs in and GP is applied. This is indeed a pain if you need to change the redirection path or the user logs in on a test machine. I think you need to refresh the policy on the users main machine.

But to do this you must first delete the users local profile on the machine and then let it be updated (if user has roaming profile). FR should work after this

Mind you there are quite a few other issues involving FR - including don't have users roaming profiles and redirected folders on the same server - if you want details on this
let me know and I'll go into more detail or mail them to you - we had a lot of input from MS on our numerous FR problems


Cheers