Solved

GPO: Do security settings remain when copied to another OU or domain?

Posted on 2016-08-23
3
55 Views
Last Modified: 2016-08-24
When you copy (not link or relink) a GPO from one OU -OR- more specifically to another domain (from test.company.com to prod.company.com with a trust).

Do GPOs retain their security filters/ groups, WMI filters, etc. ?

NOTE: NOT talking about the "internal" GPO settings i.e. Screensaver, mappings,etc.
0
Comment
Question by:nwembly
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sushil Sonawane earned 250 total points
ID: 41768167
If click on preserved permission then Yes when you gpo one OU to another OU  GPOs retain their security filters/ groups, WMI filters, etc


For more info refer below link:

https://technet.microsoft.com/en-us/library/cc947833(v=ws.10).aspx

https://msdn.microsoft.com/en-us/library/bb742376.aspx
0
 
LVL 28

Assisted Solution

by:Michael Pfister
Michael Pfister earned 250 total points
ID: 41768288
Still you have to check whether the group names resolve correctly or not. I assume when you copy a GPO from test to prod you want to filter for the prod groups not for the test groups!
0
 
LVL 18

Assisted Solution

by:Sushil Sonawane
Sushil Sonawane earned 250 total points
ID: 41768319
It totally depends on the What type domain trust you have.

1) Domainwide turst : existing group will shown in GPO

2) Selective trust : Group might be not shown if they do not have permission.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now