GP modification from different domain

I have a windows 2003 SBS (standalone) running on the same network as my production domain (Win2k Server’s).   I logon to the SBS and would like to find a way to modify the group policy of the 2k domain.  Understanding that SBS cannot establish trusts, I need to find some kind of workaround.  Can I find a tool to configure / create GP’s offline then send them to the production server? Is there a way I can temporarily authenticate w/ the 2k domain just to bring up the GPM?

Thanks in advance

Who is Participating?
mcsweenConnect With a Mentor Sr. Network AdministratorCommented:
You can create the policies on the SBS server then "back them up" with GPMC.msc.  Go to the win2k domain and restore the GPO with GPMC.msc.  Note that on the Windows 2000 domain you will have to run gpmc.msc from a WXP SP2 machine that is a member of that domain.
scott_thompsonAuthor Commented:
Is there a tool to work on them offline? It would be nice to be at home and dig through security options.
mcsweenSr. Network AdministratorCommented:
Sorry, I don't know of an offline GPO Editor.  If you are just looking to dig through the options at home you can use gpedit.msc but there will be no way to transfer the config to another computer.  Remember that any changes you make to gpedit.msc will change your local policy, so change them back after you are done.
mcsweenSr. Network AdministratorCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.