Information Technology Reference
In-Depth Information
Copying GpOs
You can copy an existing GPO within a domain, preserving the existing permissions, or giving
the target GPO the default permissions for a new GPO. Or you can copy a GPO across domain
boundaries by using the Cross-Domain Copying Wizard. To copy a GPO within a domain,
follow these steps:
1.
Open the GPMC and navigate to the Group Policy Objects container for the domain
you want copy a GPO of.
2.
Right-click the source GPO and select Copy.
3.
Right-click the Group Policy Objects container and select Paste.
In the Copy GPO dialog box, select Use The Default Permissions For New GPOs or
choose Preserve The Existing Permissions.
4.
Click OK and then OK again.
5.
6.
Rename the GPO as appropriate.
To copy a GPO across domain boundaries, follow these steps:
1.
Open the GPMC and navigate to the Group Policy Objects container for the domain
you want copy a GPO of.
2.
Right-click the source GPO and select Copy.
3.
In the target domain, right-click the Group Policy Objects container and select Paste.
In the Cross-Domain Copying Wizard, click Next on the Welcome page.
4.
5.
On the Specifying Permissions page, select Use The Default Permissions For New GPOs
or chose Preserve The Existing Permissions.
6.
Click Next. On the Scanning Original GPO page, read the Scan Results. You might have
references that you need to address. If not, skip the next step.
On the Migrating References page, you can choose to copy the references or use a
Migration Table. (See the following section, “Creating and configuring a Migration
Table” for details on how to make a Migration Table.) In most cases, you have to create
or edit a Migration Table to address differences between the two domains.
7.
On the Migrating References page, if you choose to use a migration table, you can use
one you already created as is, edit it to adjust any settings, or select New to create a
new Migration Table from scratch.
8.
9.
Click Next, click Finish, and then click OK.
To copy a GPO, use the Copy-GPO cmdlet from the GroupPolicy module. As with other
GPO commands, you can specify a Migration Table if copying across domain boundaries.
