Transfer Group Policies One Domain to Another

David Cummings
David Cummings used Ask the Experts™
How do I transfer a collection of group policy objects from one domain to another.  Domains are not related in any way and never will be, but the group policy objects are a bunch of security settings that are not specific to user names, computer names or any other specific name.  So they should easily transfer.  I just can't find a way to do it, other than to manually rebuild them one at a time in the second domain.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
AlexSenior Infrastructure Analyst
Use powershell
$date = get-date -format M.d.yyyy 
New-Item -Path \\server\c$\Backup\GroupPolicies\$date -ItemType directory 
Backup-Gpo -All -Path \\server\c$\Backup\GroupPolicies\$date

Open in new window


Then import them on the other side. Again powershell with Import-GPO

regards
Alex
Senior Infrastructure Analyst
Actually

You'd need to use Get-childitem and then wrap that around the GPO folder. Let me have a think on that one.

Something like this maybe

$GPOs = Get-Childitem \\location of GPO folders

Foreach ($GPO in GPOs){Import-GPO $GPO}

Open in new window

Ok.  Thanks.  It looks very promising.

And I am talking about the contents of the "Group Policy Objects" folder in Group Policy Management.  

I have one worry, however, which I am sure you are aware of: the "scope" of the policies won't necessarily make sense in the new domain.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

AlexSenior Infrastructure Analyst

And I am talking about the contents of the "Group Policy Objects" folder in Group Policy Management.  

Correct

I have one worry, however, which I am sure you are aware of: the "scope" of the policies won't necessarily make sense in the new domain.

And no, not by a long shot, you'll have to redo all the security, all the security filtering, all the delegation, all of it will have to be redone. There "may" be a way to do this by modifying the XML files, but i'd not like to bet on it.

Regards

Alex
AlexSenior Infrastructure Analyst
However, it'll be quicker doing it this way than it would be creating all the GPO's from scratch.
Thanks for this.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial