Solved

copy a group policy from one Ou to another in windows 2000

Posted on 2004-08-19
8
788 Views
Last Modified: 2008-05-30
Hi

I have a windows 2000 server.  I created 7 OU's and I created a policy for one OU thus far.  What I want to do is to copy that group poilcy to the others,  with the intention of making some changes to the others.  I was reading and I was inform that Group Policy Management Console in windows 2003 will work but they say it can work on 2003 server only. Is there a way to get a policy copy on windows 2000 server if you don't have windows 2003 server.  Thanks for your help.

0
Comment
Question by:rwhittle
  • 3
  • 3
8 Comments
 
LVL 5

Expert Comment

by:ralonso
ID: 11842817
Are all DC's windows 2000?

if so (with a mixture of 2003 and 2000 should work as well) you can very easily right-click each of the OU's and you will find that you can "Add" a GPO (rather than create a new one).

That will create a link to the actual OU.

That way, you modify it only once, but the changes apply to as many OUs as you need.

I hope that solves your problem
cheers.
0
 

Author Comment

by:rwhittle
ID: 11843091
I only have windows 2000 server.

I have one domain controller with 7 OU's
I created a Group Policy for one OU but instead of going through all the other six I want to copy that group Policy to the others with the intension of making some adjustments.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843255
As I said, open AD Users & computers and repeat the following process for all OU's
right-click the  OU -> Properties -> Group policies
Click on Add
Select the tab that displays all GPO's and choose yours
Click OK and you are done

That way you are linking to an existing OU (I don't know of any way of copying the actual GPO object)

Use that as a base.
Then just create a new policy for each OU with the small modifications for that specific OU.
You can move policies Up and Down to specify priority in case of conflict.


0
 

Author Comment

by:rwhittle
ID: 11843305
ok, I understand it's creating a link to the other OU.  What I really wanted is to  copy the GP.  Thanks anyway.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843441
GPOs are stored in
C:\WINNT\SYSVOL\sysvol\elsbc.local\Policies

but I wouldn't touch in there unless I were extremely sure of what I was doing
The whole idea after GPOs is that, instead of having 7 big GPOs to replicate, you just have 1 big and 7 small
Then if you need to modify something common to all, you only do it once.

You probably cannot do what you wanted, but try to take the best advantage from the possibilities in the system.
0
 

Author Comment

by:rwhittle
ID: 11995785
I found the solution to the problem I use dsmove.exe from windows 2003 server and run it from the windows 2000 server prompt.  What dsmove does is to move the users from the users group to the OU specified.  
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13589987
PAQed with points refunded (100)

modulo
Community Support Moderator
0

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now