Re: can I copy a GPO to another OU?

[Eric Fleischman [MSFT]]

Hi Mike,

You've got two options here depending upon what you are looking for in the
long term:
1) You can link the existing GPO to the second OU. The advantage here is
that you do so without actually copying the policy (IE there is still only
one policy, just two links to it). The result of linking rather than copying
is that if you edit the policy on either OU, the uses/computers in the other
OU will also "see" that edit, so you only need make changes in one location.
2) You could actually copy the policy. This would be what you'd want to do
if you think that, in the long term, you'll want to take these policies and
modify them differently on each OU. If you're going to go down this road, I
would look in to GPMC (Group Policy Management Console). Search for that on
Microsoft.com. GPMC, a free download, I believe will do the copying for you.
I've added the GP newsgroup for their thoughts....

GP guru's: can you verify my understanding of GPMC? Will it in fact let you
dup a policy intra-domain?

Thanks!
~Eric

--
Eric Fleischman [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Mike" <swit...@hotmail.com> wrote in message
news:13d2c01c44419$f7e026b0$a101...@phx.gbl...
>I want to take a pretty involved GPO that I created on 1
> OU in my tree and copy the settings creating a similar GPO
> on another OU, without having to create a new one, set all
> the settings exactly the same, etc.
>
> Possible?
>
> Thanks
>
> Mike

[Brian Desmond [MVP]]

> GP guru's: can you verify my understanding of GPMC? Will it in fact let
you
> dup a policy intra-domain?

Yes. If you right click, you can backup & restore GPs individually or as a
whole. This is what I would do ehre

--
--
Brian Desmond
Windows Server MVP
desm...@payton.cps.k12.il.us

Http://www.briandesmond.com

"Eric Fleischman [MSFT]" <efl...@online.microsoft.com> wrote in message
news:OqmvQTnR...@tk2msftngp13.phx.gbl...

[Roger Abell [MVP]]

Hi Eric,

While indeed GPMC can be used to do this,
it is also a fairly common misunderstanding that GPOs "live"
where linked, rather than at the domain level. So, it is very
likely that OP is after a new link, as with your first response.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4

"Eric Fleischman [MSFT]" <efl...@online.microsoft.com> wrote in message
news:OqmvQTnR...@tk2msftngp13.phx.gbl...