[Last Call] Learn how to a build a cloud-first strategyRegister Now


GP modification from different domain

Posted on 2006-05-01
Medium Priority
Last Modified: 2010-04-18
I have a windows 2003 SBS (standalone) running on the same network as my production domain (Win2k Server’s).   I logon to the SBS and would like to find a way to modify the group policy of the 2k domain.  Understanding that SBS cannot establish trusts, I need to find some kind of workaround.  Can I find a tool to configure / create GP’s offline then send them to the production server? Is there a way I can temporarily authenticate w/ the 2k domain just to bring up the GPM?

Thanks in advance

Question by:scott_thompson
  • 3
LVL 22

Accepted Solution

mcsween earned 1000 total points
ID: 16577417
You can create the policies on the SBS server then "back them up" with GPMC.msc.  Go to the win2k domain and restore the GPO with GPMC.msc.  Note that on the Windows 2000 domain you will have to run gpmc.msc from a WXP SP2 machine that is a member of that domain.

Author Comment

ID: 16577446
Is there a tool to work on them offline? It would be nice to be at home and dig through security options.
LVL 22

Expert Comment

ID: 16577693
Sorry, I don't know of an offline GPO Editor.  If you are just looking to dig through the options at home you can use gpedit.msc but there will be no way to transfer the config to another computer.  Remember that any changes you make to gpedit.msc will change your local policy, so change them back after you are done.
LVL 22

Expert Comment

ID: 16577698

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Integration Management Part 2
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question