• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 802
  • Last Modified:

copy a group policy from one Ou to another in windows 2000

Hi

I have a windows 2000 server.  I created 7 OU's and I created a policy for one OU thus far.  What I want to do is to copy that group poilcy to the others,  with the intention of making some changes to the others.  I was reading and I was inform that Group Policy Management Console in windows 2003 will work but they say it can work on 2003 server only. Is there a way to get a policy copy on windows 2000 server if you don't have windows 2003 server.  Thanks for your help.

0
rwhittle
Asked:
rwhittle
  • 3
  • 3
1 Solution
 
ralonsoCommented:
Are all DC's windows 2000?

if so (with a mixture of 2003 and 2000 should work as well) you can very easily right-click each of the OU's and you will find that you can "Add" a GPO (rather than create a new one).

That will create a link to the actual OU.

That way, you modify it only once, but the changes apply to as many OUs as you need.

I hope that solves your problem
cheers.
0
 
rwhittleAuthor Commented:
I only have windows 2000 server.

I have one domain controller with 7 OU's
I created a Group Policy for one OU but instead of going through all the other six I want to copy that group Policy to the others with the intension of making some adjustments.
0
 
ralonsoCommented:
As I said, open AD Users & computers and repeat the following process for all OU's
right-click the  OU -> Properties -> Group policies
Click on Add
Select the tab that displays all GPO's and choose yours
Click OK and you are done

That way you are linking to an existing OU (I don't know of any way of copying the actual GPO object)

Use that as a base.
Then just create a new policy for each OU with the small modifications for that specific OU.
You can move policies Up and Down to specify priority in case of conflict.


0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
rwhittleAuthor Commented:
ok, I understand it's creating a link to the other OU.  What I really wanted is to  copy the GP.  Thanks anyway.
0
 
ralonsoCommented:
GPOs are stored in
C:\WINNT\SYSVOL\sysvol\elsbc.local\Policies

but I wouldn't touch in there unless I were extremely sure of what I was doing
The whole idea after GPOs is that, instead of having 7 big GPOs to replicate, you just have 1 big and 7 small
Then if you need to modify something common to all, you only do it once.

You probably cannot do what you wanted, but try to take the best advantage from the possibilities in the system.
0
 
rwhittleAuthor Commented:
I found the solution to the problem I use dsmove.exe from windows 2003 server and run it from the windows 2000 server prompt.  What dsmove does is to move the users from the users group to the OU specified.  
0
 
moduloCommented:
PAQed with points refunded (100)

modulo
Community Support Moderator
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now