Transfering Group Policy Settings to a Test Environment

Posted on 2009-02-10
Last Modified: 2012-05-06
We are building a test environment for some development work.  I want to have a complete environment, so I need to transfer all of my group policy settings.  Is there a way to export the GPOs from one domain to another, or will I need to manually create each GPO?

I am in an all Server 2003 environment.
Question by:Patrick_Super-Server
    LVL 13

    Accepted Solution

    There are scripts in the Program Files\GPMC\Scripts directory that can be run to allow you to export all of your GPOs to a directory. Then others that can be used to import GPOs as well.

    Look for a script called "BackupAllGPOs" to back them up, and then another called "ImportAllGPOs".

    Keep in mind though that security filtering for GPOs is done based on the SID of the object that it applies to, and because your SIDs will be different between the domains, you will likely have to reconfigure your security filters.
    LVL 57

    Assisted Solution

    by:Mike Kline
    In addition to the scripts you can use migration tables to help you out.  More on migration tables here
    LVL 13

    Expert Comment

    One more thing... in GPMC you can right-click the "Group Policy Objects" folder and select "Manage Backups" where it gives you a GUI interface to backup and restore GPOs.

    The backups go to a folder on your drive. Then you can import again when connected to a different domain.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now