Solved

copy a group policy from one Ou to another in windows 2000

Posted on 2004-08-19
8
792 Views
Last Modified: 2008-05-30
Hi

I have a windows 2000 server.  I created 7 OU's and I created a policy for one OU thus far.  What I want to do is to copy that group poilcy to the others,  with the intention of making some changes to the others.  I was reading and I was inform that Group Policy Management Console in windows 2003 will work but they say it can work on 2003 server only. Is there a way to get a policy copy on windows 2000 server if you don't have windows 2003 server.  Thanks for your help.

0
Comment
Question by:rwhittle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 5

Expert Comment

by:ralonso
ID: 11842817
Are all DC's windows 2000?

if so (with a mixture of 2003 and 2000 should work as well) you can very easily right-click each of the OU's and you will find that you can "Add" a GPO (rather than create a new one).

That will create a link to the actual OU.

That way, you modify it only once, but the changes apply to as many OUs as you need.

I hope that solves your problem
cheers.
0
 

Author Comment

by:rwhittle
ID: 11843091
I only have windows 2000 server.

I have one domain controller with 7 OU's
I created a Group Policy for one OU but instead of going through all the other six I want to copy that group Policy to the others with the intension of making some adjustments.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843255
As I said, open AD Users & computers and repeat the following process for all OU's
right-click the  OU -> Properties -> Group policies
Click on Add
Select the tab that displays all GPO's and choose yours
Click OK and you are done

That way you are linking to an existing OU (I don't know of any way of copying the actual GPO object)

Use that as a base.
Then just create a new policy for each OU with the small modifications for that specific OU.
You can move policies Up and Down to specify priority in case of conflict.


0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:rwhittle
ID: 11843305
ok, I understand it's creating a link to the other OU.  What I really wanted is to  copy the GP.  Thanks anyway.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 11843441
GPOs are stored in
C:\WINNT\SYSVOL\sysvol\elsbc.local\Policies

but I wouldn't touch in there unless I were extremely sure of what I was doing
The whole idea after GPOs is that, instead of having 7 big GPOs to replicate, you just have 1 big and 7 small
Then if you need to modify something common to all, you only do it once.

You probably cannot do what you wanted, but try to take the best advantage from the possibilities in the system.
0
 

Author Comment

by:rwhittle
ID: 11995785
I found the solution to the problem I use dsmove.exe from windows 2003 server and run it from the windows 2000 server prompt.  What dsmove does is to move the users from the users group to the OU specified.  
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13589987
PAQed with points refunded (100)

modulo
Community Support Moderator
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Changing email address in Exchange 2010 2 51
CAL for Disabled accounts 4 56
login scripts windows 10 5 25
Password not expiry users and if they're enabled 7 24
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question