Solved

import GPO from one domain to another

Posted on 2013-11-25
9
599 Views
Last Modified: 2014-06-28
Need to setup another SBS 2011 domain, no link with existing SBS 2011 domain.
(two different domain without any connection)

I have configured so many GPO settings in this domain.
Need to configure exactly same GPO to another domain.
What is the right procedure to do the same.

I tried Advanced Group Policy Management (AGPM) 4.0 that is a part of Microsoft Desktop Optimization Pack (MDOP)
The original GPO is in uncontrolled environment. I make it controlled, exported it to a cab file & tried importing it in another domain, but its showing name of the previous domain while importing.

I have no clue how to avoid creating so many GPO manually.

Please guide.
0
Comment
Question by:Akash Bansal
  • 5
  • 2
9 Comments
 
LVL 14

Expert Comment

by:Ram Balachandran
Comment Utility
You need to use Migration table while importing
http://technet.microsoft.com/en-us/library/cc737567(v=ws.10).aspx
0
 
LVL 35

Assisted Solution

by:Mahesh
Mahesh earned 500 total points
Comment Utility
You need to backup GPO 1st from source domain through GPMC\Group Policy Objects container.
Then carry this backup to target domain controller.
Then you need to create new GPO in target domain through GPMC
Then navigate to group Policy objects container and right click newly created GPO and select "import settings"
Please follow on screen instruction

Mahesh
0
 
LVL 1

Author Comment

by:Akash Bansal
Comment Utility
Thanks for the support Joensw & Ram_kerala.
I guess, at the next step of importing GPO using Advanced Group Policy Management (AGPM) 4.0 that is a part of Microsoft Desktop Optimization Pack (MDOP); the wizard checked if the policy contains any hard path to previous domain.
Please find the screen shot:
Screenshot while importing
As none of the policy is having hard links to previous server or domain, I am able to successfully importing the GPO as intended.

Still working on it; I hope it wont show any further issue.
0
 
LVL 1

Author Comment

by:Akash Bansal
Comment Utility
Issue has been resolved as per the way I wrote.
Please let me know how to close this. whom to give the points and accept the solution.
0
The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
Comment Utility
Its not the case that you must use migration table for GPO migration.

If there are security priciples has got permissions on source GPO some where in user rights section, then with migration table its easier to identify those security principles and replace it with your source domain
http://blogs.technet.com/b/doxley/archive/2008/04/22/group-policy-migration-without-the-headache.aspx
If you avoid migration table, later on post importing GPO to your domain from backup, you can change \ add your secuirty principles as necessary for user rights.

Normally standard GPMC console is enough for this, not sure why you used AGPM

Mahesh
0
 
LVL 1

Author Comment

by:Akash Bansal
Comment Utility
Sorry guys for the much delay.. I was busy with something else.

The procedure that @MaheshPM has suggested is very good.
The only shortcoming between AGPM is that I have to create manually a new blank policy with the desired name & importing each one.

Rest is fine I guess, still testing.. would update you shortly.
0
 
LVL 1

Author Comment

by:Akash Bansal
Comment Utility
It worked, as GPO were not containing security principles, I didn't use migration tables even.
But if they had have used migration table too.

Thanks! :)
0
 
LVL 1

Author Closing Comment

by:Akash Bansal
Comment Utility
Perfect!
0

Featured Post

Want to promote your upcoming event?

Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

Join & Write a Comment

If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now