We help IT Professionals succeed at work.

Recover GPOs from a server HDD

David Blair
David Blair asked
on
31 Views
Last Modified: 2017-04-15
Hi Experts,

We started configuring a customer's new domain controller, and put about six or seven hours into it. Most of the time was spent tweaking and testing group policies.  For reasons I'd rather not get into, a hardware change was made and the drive is no longer bootable but I can still get to the data. The fact the drive isn't a bootable doesn't really concern me, because I can just reinstall the operating system and start over. No big deal.  But what I would REALLY like to do is recover these policies so we don't have to re-create them.

Experts: Where can I retrieve those policies from the old drive, and how do I import them into a new domain controller?
Comment
Watch Question

K B

Commented:
Was this the sole Domain Controller in the domain?

Author

Commented:
Yes.
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
Try this process
http://www.chrisleblanc.org/restoring-gpos-backup/

You can try to create new GPO and copy content from original SYSVOL GPO into it after fixing any GUID references in it

Author

Commented:
Sounds good, but I can't boot the broken server drive.  Is there a path on the C Dr. where I can locate the GPO data?
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
C:\Windows\SYSVOL\domain\Policies
K B

Commented:
I think the trick is you need a backup to import. If you can't boot the os how do you backup the gpo s?  I think there may be a way to copy on top of a backup that you create on the new dc.
K B

Commented:
... then reimport.

Author

Commented:
I mean, it's not the end of the world if I need to rebuild the GPOs. I just remember reading somewhere, sometime, maybe in another lifetime, that somewhere on the C drive is a directory, usually it's named with the GUID of the GPO, and inside was all the policy data. Was hoping to use that to import into the new machine.
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
I have just tested the following and it works.

Create new GPO and copy old GPO data into it, overwriting old data. Not ideal but works in a pinch
K B

Commented:
I'm with you on that. Yes it does represent that (GUID). But I tried to import a copy of a gpo and it only looks to import a backup.
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
I have just tested the following and it works.

Create new GPO and copy old GPO data into it, overwriting old data. Not ideal but works in a pinch
K B

Commented:
If I were you, use Shaun's method and then recreate by backing up and importing to a fresh gpo or just redo a fresh gpo with the knowledge you have

Author

Commented:
OMG that's a brilliant idea. We'll give it a try!

Author

Commented:
What's that file path?
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
C:\Windows\SYSVOL\domain\Policies
Senior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
Glad we could help.

@OP, experts and future visitors:
Please remember to endorse my, or any other expert's comments that you found helpful by clicking on the "Thumb's Up" button

Read more on endorsements
https://www.experts-exchange.com/discussions/218503/What-are-Endorsements.html
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.