Need "lessons learned" on using GPMC to migrate OUs, GPOs

All,

I need your thoughts / experiences with using Group Policy Managment Console
to migrate OUs and GPOs created in a test lab environment. Heres the
background on what I'm planning on doing:

I migrated all of our NT 4.0 domain system policy objects from .pol files to
a AD 2003 GPOs using gpolmig.exe. The domain is the same domain as our
production NT 4.0 domain only it has been upgraded to 2003 AD in an isloated
environment. I created a BDC in our lab environment and synced the BDCs
directory with the PDC then took the BDC off the network and isolated in a
little lab. Next, I upgraded the BDC to 2003 AD domain controller. The
2003 AD domain has all the user and computer accounts in the AD domain as we
have in our production NT 4.0 domain. I created the OU structure and
attached the GPO's I created while migrating system policy to group policy
objects using gpolmig.exe. What I have now is our exact NT domain captured
in our 2003 Active Directory lab.

What I'm planning on doing and what I've already tested in a small lab is
using the scripts "CreateXMLFromEnvironment.wsf" and
"CreateEnvironmentFromXML.wsf" that come with the GPMC to backup my lab
environment and then restore it to our production environment after we
uprade our NT PDC to 2003 domain controller. The purpose of all this was to
find a way to slowly migrate 1000 NT system policy objects to AD GPOs during
a weekend upgrade from NT to AD 2003.

Does anyone have experience with GPMC environment scripts or have any
suggestions / gotchas etc.?


.

Relevant Pages

  • Re: Planning A Group Policy Deployment
    ... construct for admin/mgmt of the computing environment (i.e. ... In a more ideal world one gets to factor policy settings so ... network functionality and domain wide network access issues. ... I am prejudiced when it comes to the guides you mention (as ...
    (microsoft.public.windows.group_policy)
  • RE: Ensuring Disabling/Uninstalation of Windows XP Firewall in LA N enviro.
    ... Since the Group Policy editor is really just a fancy GUI for making registry ... Ensuring Disabling/Uninstalation of Windows XP Firewall in LAN ... Since this is not an AD environment as yet, ...
    (Focus-Microsoft)
  • Re: Corporate Humour
    ... There is a third environment: ... Enron/Andersen thing to petty crap where some overling can "change" the policy, use vague phrases in memos and letters, and then after whatever has happened, "change back" the policy and if the higher-ups back the guy up, then he gets away with it. ... If there is a market for Y, and sales says "There is a market for Y" then the orders were passed on. ... IBM was very much like a military organization with dress codes, behavior codes, process codes/regulations/policies/etc. ...
    (sci.research.careers)
  • Re: Creating a test lab
    ... > I am trying to create a test lab that replicates our production ... Normally the first server created in a forest holds all five FSMO roles, ... If you were to recreate it in a test environment as the only DC, ...
    (microsoft.public.win2000.active_directory)
  • Re: Differential Startmenus based on computer delivered via Group Policy
    ... Assuming the users are static in those labs you can create a folder redirection policy. ... i.e. if they were in Lab 1, ... suggest how best to use group policies to deliver different start ...
    (microsoft.public.windows.group_policy)