GPO: Do security settings remain when copied to another OU or domain?

ITAddict
ITAddict used Ask the Experts™
on
When you copy (not link or relink) a GPO from one OU -OR- more specifically to another domain (from test.company.com to prod.company.com with a trust).

Do GPOs retain their security filters/ groups, WMI filters, etc. ?

NOTE: NOT talking about the "internal" GPO settings i.e. Screensaver, mappings,etc.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
If click on preserved permission then Yes when you gpo one OU to another OU  GPOs retain their security filters/ groups, WMI filters, etc


For more info refer below link:

https://technet.microsoft.com/en-us/library/cc947833(v=ws.10).aspx

https://msdn.microsoft.com/en-us/library/bb742376.aspx
Still you have to check whether the group names resolve correctly or not. I assume when you copy a GPO from test to prod you want to filter for the prod groups not for the test groups!
It totally depends on the What type domain trust you have.

1) Domainwide turst : existing group will shown in GPO

2) Selective trust : Group might be not shown if they do not have permission.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial