none
export and import GPO

    Question

  • Hi All:

    The current server group policy is set by ex-engineer. Now I want to review what are all the Policy he set. so where should I start?

    1: How can I export all the GPO?
    2: How can I import to a new server?

    Thanks.
    Monday, June 1, 2009 2:21 AM

Answers

All replies


  • Hello,

    Download and install GPMC from here: http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en and look at the steps below for importing.
    Import:
    1. Open Group Policy Management.
    2. In the console tree, double-click Group Policy Objects in the forest and domain containing the Group Policy object (GPO) into which you want to import settings.
      Where?
      • Forest name
      • Domains
      • Domain name
      • Group Policy Objects
    3. Right-click the GPO, and then click Import Settings.
    4. Follow the instructions in the Import Settings Wizard, and then click Finish.

    From technet website: http://technet.microsoft.com/en-us/library/cc779123(WS.10).aspx

    Also, get more information on listing GPOs using GPMC etc http://technet.microsoft.com/en-us/library/cc784365(WS.10).aspx


    Isaac Oben MCITP:EA, MCSE
    Monday, June 1, 2009 3:13 AM
  • Hi Isaac:

    I cannot find Group Policy Management shortcut in the Administrative Tools, means I haven't install GPMC on this server right?

    Is it other ways can export out the group policy using the default program? this is the live server, I don't have test server to test this program, will worry anything wrong will cause the server down. Hope you understand it.

    Thanks for reply my question.

    Monday, June 1, 2009 3:24 AM
  • Yes, that means GPMC is not yet installed. You need to download and install GPMC to better manage gpo. I am not sure if you can export without GPMC, but you can try to go to the specific OU/Site object, right click properties, Select Group Policy tab, click open.

    GPMC will do no harm as long as you are not making any changes etc..YOu can use it to view, export etc
    Isaac Oben MCITP:EA, MCSE
    Monday, June 1, 2009 3:33 AM
  • Isaac:

    Yes, i am able to go to each OU->Properties->Group Policy tab to see what is the policy there. The difficulty I face is when I open the Group Policy Object Editor,
    there are Computer Configuration and User Configuration, (Don't really know what is the different between this two). And under each menu there are so many sub menus.

    What I really need is only list me out all the Policy which is enable?  Do you think is possible to do so?

    Thanks.
    Monday, June 1, 2009 3:42 AM
  • Hello,

    The computer configuration shows you the active domain computer policies via GPO and vice versa for user configurations. You can right click and save report if you need to. Click on submenu to see more details of which policy is being applied and settings
    Isaac Oben MCITP:EA, MCSE
    Monday, June 1, 2009 4:00 AM
  • Isaac:

    Can you tell me more detail, where I can save the report? I am only interested the settings which are enable, or disabled,  NOT ALL the setting in each menu.

    When I click the Policy name and export, this is the text file export out?
    Name
    Computer Configuration
    User Configuration

    thanks all your time reply my post.
    Monday, June 1, 2009 4:17 AM
  • Hello,

    You can either export/saveas xml or html file but GPMC will probably give you more optios. All what you see are the defined policies (Enabled/Disabled). If a policy is not defined, it will not show on the GPO settings.


    Isaac Oben MCITP:EA, MCSE
    Monday, June 1, 2009 4:31 AM
  • Hi Isaac,

    I have another server which doesn't use Domain Controller so I used MMC and then add snap-in of GPO which allowed me to set the rules. The template save is in .MSC extension. How can I import that into my current Domain Controlled Windows 2008 R2? Old system was also a Windows 2008 R2.

    I can also have the file in something like .csv as I can have the RSOP copied but this doesn't get imported as file type is different.

    P.S. Downloading GPMC didn't help me because I get the error, "To manage group policy, you must log on to the computer with a domain user account"

    Your input is much appreciated. Thanks


    • Edited by Torontob Friday, August 31, 2012 6:53 PM added details
    Friday, August 31, 2012 6:36 PM