[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


GPO question

Posted on 2014-07-16
Medium Priority
Last Modified: 2014-07-16
If I link an existing GPO to another OU and make a change to the policy in the linked location, does that change it in both locations? Thanks. If so how can I get a copy of the settings to new OU that I can change without changing original?
Question by:Thomas N
  • 3
  • 2
LVL 85

Expert Comment

ID: 40200045
Yes, it'll change "both" locations. A GPO link is just that: a link.
You have two possibilities:
- copy the complete GPO using the GPMC, remove the link to the original GPO, and link the copied one (after adjusting it to your likings).
- create a new GPO with just the differences, and link that to the other OU with a higher priority than the original GPO.

Author Comment

by:Thomas N
ID: 40200311
How can I make a copy? Step by step instructions if possible. Thanks.
LVL 85

Accepted Solution

oBdA earned 2000 total points
ID: 40200335
Going from memory here: In the GPMC, expand Group Policy Management\Forest\Domains\<YourDomain>\Group Policy Objects
Locate the GPO you want under Group Policy Objects, right-click it, and select "Copy".
Right-Click "Group Policy Objects" and select "Paste".
Rename the new GPO to whatever you want and link it to the target OU.

Author Comment

by:Thomas N
ID: 40200367
No option to copy when right clicking, closest one is option to save report but I dont see how we can restore it.

Author Comment

by:Thomas N
ID: 40200371
nevermind I found it.

Featured Post

Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question