Solved

Is there a way to schedule the GPO backup process that can be performed manually in the GPMC?

Posted on 2012-04-03
4
432 Views
Last Modified: 2012-04-03
Folks -

In the GPMC, if one right-clicks on "Group Policy Objects" and chooses "Back Up All...", a complete backup of all GPOs will be done to a single destination directory.  If you run this over and over, cumulative backups are stored and an admin can choose to rollback to specific times and dates for any individual GPO.

That said, does anyone know how to schedule this specific process via Powershell or otherwise?  I'm not interested in a script that simply copies SYSVOL to a folder, I know how to do that.  What I'm looking for is the ability to trigger the process that is within GPMC via automated means.  That way I get version history and the ability to roll back to a point in time backup more easily than if I just copied SYSVOL in its entirety.

Thanks.
0
Comment
Question by:amendala
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 37802088
Look into Advance Group Policy Management. It automatically backs up your GPOs (after every change). You can then revert back to any previous GPO (as well as restore deleted GPOs).
0
 
LVL 17

Accepted Solution

by:
Anuroopsundd earned 500 total points
ID: 37802117
Yes their is commandlet which can be used through powershell

Backup-GPO
Backs up one GPO or all the GPOs in a domain.

Syntax
Copy
 Backup-GPO [-Name] <string> -Path <string> [-Comment <string>] [-Domain <string>] [-Server <string>] [<CommonParameters>]
Copy
 Backup-GPO -All -Path <string> [-Comment <string>] [-Domain <string>] [-Server <string>] [<CommonParameters>]
Copy
 Backup-GPO -Guid <Guid> -Path <string> [-Comment <string>] [-Domain <string>] [-Server <string>] [<CommonParameters>]

http://technet.microsoft.com/en-us/library/ee461052.aspx

for complete list of gpo cmdlets
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 37802124
There are also scripts that come with GPMC that you can use   http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx

download them here for the 2008 box  http://www.microsoft.com/download/en/details.aspx?id=14536  (not sure why they are not included in 2008)

BackupAllGPOs.wsf  might be what you are after

Thanks

Mike
0
 

Author Comment

by:amendala
ID: 37802216
Just playing around I've discovered that it's insanely easy.  All you need is a destination directory already created.  Then use the following CMDLet syntax to backup all GPOs:

Backup-GPO -All -Path "C:\GPOBackups"

You'll need both the "ActiveDirectory" and "GroupPolicy" modules imported for this to work.  This not only backs up all the GPOs but does so in the same fashion the GPMC does so version history is retained.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question