Solved

copy a group policy from one Ou to another in windows 2000

Posted on 2004-08-19
8
793 Views
Last Modified: 2008-05-30
Hi

I have a windows 2000 server.  I created 7 OU's and I created a policy for one OU thus far.  What I want to do is to copy that group poilcy to the others,  with the intention of making some changes to the others.  I was reading and I was inform that Group Policy Management Console in windows 2003 will work but they say it can work on 2003 server only. Is there a way to get a policy copy on windows 2000 server if you don't have windows 2003 server.  Thanks for your help.

0
Comment
Question by:rwhittle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 5

Expert Comment

by:ralonso
ID: 11842817
Are all DC's windows 2000?

if so (with a mixture of 2003 and 2000 should work as well) you can very easily right-click each of the OU's and you will find that you can "Add" a GPO (rather than create a new one).

That will create a link to the actual OU.

That way, you modify it only once, but the changes apply to as many OUs as you need.

I hope that solves your problem
cheers.
0
 

Author Comment

by:rwhittle
ID: 11843091
I only have windows 2000 server.

I have one domain controller with 7 OU's
I created a Group Policy for one OU but instead of going through all the other six I want to copy that group Policy to the others with the intension of making some adjustments.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843255
As I said, open AD Users & computers and repeat the following process for all OU's
right-click the  OU -> Properties -> Group policies
Click on Add
Select the tab that displays all GPO's and choose yours
Click OK and you are done

That way you are linking to an existing OU (I don't know of any way of copying the actual GPO object)

Use that as a base.
Then just create a new policy for each OU with the small modifications for that specific OU.
You can move policies Up and Down to specify priority in case of conflict.


0
Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

 

Author Comment

by:rwhittle
ID: 11843305
ok, I understand it's creating a link to the other OU.  What I really wanted is to  copy the GP.  Thanks anyway.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843441
GPOs are stored in
C:\WINNT\SYSVOL\sysvol\elsbc.local\Policies

but I wouldn't touch in there unless I were extremely sure of what I was doing
The whole idea after GPOs is that, instead of having 7 big GPOs to replicate, you just have 1 big and 7 small
Then if you need to modify something common to all, you only do it once.

You probably cannot do what you wanted, but try to take the best advantage from the possibilities in the system.
0
 

Author Comment

by:rwhittle
ID: 11995785
I found the solution to the problem I use dsmove.exe from windows 2003 server and run it from the windows 2000 server prompt.  What dsmove does is to move the users from the users group to the OU specified.  
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13589987
PAQed with points refunded (100)

modulo
Community Support Moderator
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question