GPO: Do security settings remain when copied to another OU or domain?

Posted on 2016-08-23
Medium Priority
Last Modified: 2016-08-24
When you copy (not link or relink) a GPO from one OU -OR- more specifically to another domain (from test.company.com to prod.company.com with a trust).

Do GPOs retain their security filters/ groups, WMI filters, etc. ?

NOTE: NOT talking about the "internal" GPO settings i.e. Screensaver, mappings,etc.
Question by:ITAddict
  • 2
LVL 18

Accepted Solution

Sushil Sonawane earned 1000 total points
ID: 41768167
If click on preserved permission then Yes when you gpo one OU to another OU  GPOs retain their security filters/ groups, WMI filters, etc

For more info refer below link:


LVL 29

Assisted Solution

by:Michael Pfister
Michael Pfister earned 1000 total points
ID: 41768288
Still you have to check whether the group names resolve correctly or not. I assume when you copy a GPO from test to prod you want to filter for the prod groups not for the test groups!
LVL 18

Assisted Solution

by:Sushil Sonawane
Sushil Sonawane earned 1000 total points
ID: 41768319
It totally depends on the What type domain trust you have.

1) Domainwide turst : existing group will shown in GPO

2) Selective trust : Group might be not shown if they do not have permission.

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Measuring Server's processing rate with a simple powershell command. The differences in processing rate also was recorded in different use-cases, when a server in free and busy states.
If you need to implement application level security in an Access database application or other VBA code, I strongly encourage you to take advantage of Active Directory groups.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question