GP modification from different domain

Posted on 2006-05-01
Last Modified: 2010-04-18
I have a windows 2003 SBS (standalone) running on the same network as my production domain (Win2k Server’s).   I logon to the SBS and would like to find a way to modify the group policy of the 2k domain.  Understanding that SBS cannot establish trusts, I need to find some kind of workaround.  Can I find a tool to configure / create GP’s offline then send them to the production server? Is there a way I can temporarily authenticate w/ the 2k domain just to bring up the GPM?

Thanks in advance

Question by:scott_thompson
    LVL 21

    Accepted Solution

    You can create the policies on the SBS server then "back them up" with GPMC.msc.  Go to the win2k domain and restore the GPO with GPMC.msc.  Note that on the Windows 2000 domain you will have to run gpmc.msc from a WXP SP2 machine that is a member of that domain.

    Author Comment

    Is there a tool to work on them offline? It would be nice to be at home and dig through security options.
    LVL 21

    Expert Comment

    Sorry, I don't know of an offline GPO Editor.  If you are just looking to dig through the options at home you can use gpedit.msc but there will be no way to transfer the config to another computer.  Remember that any changes you make to gpedit.msc will change your local policy, so change them back after you are done.
    LVL 21

    Expert Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now