?
Solved

copy a group policy from one Ou to another in windows 2000

Posted on 2004-08-19
8
Medium Priority
?
795 Views
Last Modified: 2008-05-30
Hi

I have a windows 2000 server.  I created 7 OU's and I created a policy for one OU thus far.  What I want to do is to copy that group poilcy to the others,  with the intention of making some changes to the others.  I was reading and I was inform that Group Policy Management Console in windows 2003 will work but they say it can work on 2003 server only. Is there a way to get a policy copy on windows 2000 server if you don't have windows 2003 server.  Thanks for your help.

0
Comment
Question by:rwhittle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 5

Expert Comment

by:ralonso
ID: 11842817
Are all DC's windows 2000?

if so (with a mixture of 2003 and 2000 should work as well) you can very easily right-click each of the OU's and you will find that you can "Add" a GPO (rather than create a new one).

That will create a link to the actual OU.

That way, you modify it only once, but the changes apply to as many OUs as you need.

I hope that solves your problem
cheers.
0
 

Author Comment

by:rwhittle
ID: 11843091
I only have windows 2000 server.

I have one domain controller with 7 OU's
I created a Group Policy for one OU but instead of going through all the other six I want to copy that group Policy to the others with the intension of making some adjustments.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843255
As I said, open AD Users & computers and repeat the following process for all OU's
right-click the  OU -> Properties -> Group policies
Click on Add
Select the tab that displays all GPO's and choose yours
Click OK and you are done

That way you are linking to an existing OU (I don't know of any way of copying the actual GPO object)

Use that as a base.
Then just create a new policy for each OU with the small modifications for that specific OU.
You can move policies Up and Down to specify priority in case of conflict.


0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:rwhittle
ID: 11843305
ok, I understand it's creating a link to the other OU.  What I really wanted is to  copy the GP.  Thanks anyway.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843441
GPOs are stored in
C:\WINNT\SYSVOL\sysvol\elsbc.local\Policies

but I wouldn't touch in there unless I were extremely sure of what I was doing
The whole idea after GPOs is that, instead of having 7 big GPOs to replicate, you just have 1 big and 7 small
Then if you need to modify something common to all, you only do it once.

You probably cannot do what you wanted, but try to take the best advantage from the possibilities in the system.
0
 

Author Comment

by:rwhittle
ID: 11995785
I found the solution to the problem I use dsmove.exe from windows 2003 server and run it from the windows 2000 server prompt.  What dsmove does is to move the users from the users group to the OU specified.  
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13589987
PAQed with points refunded (100)

modulo
Community Support Moderator
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question