JSI Tip 5320. How do I copy a Group Policy Object (GPO) to another domain?

When you create a GPO in Active Directory, Windows 2000 places the policy in the SYSVOL at %SystemRoot%\SYSVOL\sysvol\<FQDN>\Policies\\{GUID\}, where <FQDN> is the Fully Qualified Domain Name, like JSIINC.COM, and \{GUID\} is a Globally Unique IDentifier. To determine the \{GUID\}, use any of the following 3 methods:

1. Run GPOTOOL.EXE /Verbose.

2. Use a MMC snap-in, like Active Directory Users and Computer, to right-click a container that has the GPO applied. Select the GPO and press Properties.

3. Use the MMC to add the Group Policy snap-in, add the GPO, right-click it, and press Properties.

To copy a GPO to another domain:

1. Create a new GPO in the target domain.

2. Determine the \{GUID\} of the new GPO.

3. Delete the contents of the \\Target_Domain_Server\Admin$\SYSVOL\sysvol\<FQDN>\Policies\\{New_GPO_GUID\} folder.

4. Determine the \{GUID\} of the GPO you wish to copy.

5. Copy the contents of the %SystemRoot%\SYSVOL\sysvol\<FQDN>\Policies\\{GUID\} folder to the \\Target_Domain_Server\Admin$\SYSVOL\sysvol\<FQDN>\Policies\\{New_GPO_GUID\} folder.



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish