locked
Move users in AD and leave group policy untouch RRS feed

  • Question

  • Greetings!

    Our company went to a complete reorganization. We have a new departments names and we need to reorganize the hole AD structure. I made new organizational units and now I need to move my users there. What would be the easiest way to do this and keep the group policy on previous organizational units untouch?


    bostjanc
    Monday, January 10, 2011 8:41 AM

Answers

  • Hi,
    creating new Organizational Unit don't touch the GPO configuration in other OU.
    So when you move your user and computer to another OU they inherit the GPO's applied to the new OU.
    
    Hope help you
    

    Best Regards Don't forget to mark it as answer if it helps
    • Proposed as answer by Miles Zhang Monday, January 10, 2011 9:34 AM
    • Marked as answer by B_C_R Monday, January 10, 2011 9:40 AM
    Monday, January 10, 2011 8:51 AM

All replies

  • Hi,
    creating new Organizational Unit don't touch the GPO configuration in other OU.
    So when you move your user and computer to another OU they inherit the GPO's applied to the new OU.
    
    Hope help you
    

    Best Regards Don't forget to mark it as answer if it helps
    • Proposed as answer by Miles Zhang Monday, January 10, 2011 9:34 AM
    • Marked as answer by B_C_R Monday, January 10, 2011 9:40 AM
    Monday, January 10, 2011 8:51 AM
  • Maybe my problem was not described good. I want to move a group policy as well and later I want to delete old group policy and old organizational unit. But i don't want that with this move process group polices are re-applying.

    For example:

    User John in OU Staff has a GPO Install Program1.

    I create new OU Staff-Company and put John there. I wish that he will have the same group policy as before but I dont wish that this move GPO process will uninstall program and install it again?


    bostjanc
    Monday, January 10, 2011 8:55 AM
  • I think I understand your goal!
    When you move John to a new OU he loses all inherited GPO from the before OU when he were member of it. the new GPO applied to him are the GPO's applied to his new OU.
    
    Hope help you

    Best Regards Don't forget to mark it as answer if it helps
    Monday, January 10, 2011 9:01 AM
  • Howdie!
     
    Am 10.01.2011 09:55, schrieb Bostjan Cvelbar:
    > I create new OU Staff-Company and put John there. I wish that he will
    > have the same group policy as before but I dont wish that this move GPO
    > process will uninstall program and install it again?
     
    There is no 1:1 relationship between GPOs and OUs. In fact, you can have
    one GPO and link it to multiple OUs. So what you do is create a GPO-dump
    of the "current" OU (or leave it as-is) and create the new OU structure.
    Then link all GPOs the old OU has linked to the new OU. In the end, just
    delete the old OU. You're done. The exact same GPO is linked to the new OU.
     
    Cheers,
    Florian
     

    The views and opinions expressed in my postings do NOT correlate with the ones of my friends, family or my employer.
    Monday, January 10, 2011 7:22 PM
  • Howdie!
     
    Am 10.01.2011 20:22, schrieb Florian Frommherz:
    > Then link all GPOs the old OU has linked to the new OU. In the end, just
    > delete the old OU. You're done. The exact same GPO is linked to the new OU.
     
    Obviously, you need to take the OU hierarchy into account, too -- GPOs
    from parent OUs might be applicable, too. A complete gpresult.exe and
    rsop.msc may help you there.
     
    Cheers,
    Florian
     

    The views and opinions expressed in my postings do NOT correlate with the ones of my friends, family or my employer.
    Monday, January 10, 2011 7:27 PM