Re: Copy GPO's?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Excellent answer, thank you very much.

a testing i will go . . .


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:eFdl4$VbHHA.4832@xxxxxxxxxxxxxxxxxxxxxxx
One has always had the ability to link one GPO to multiple contrainers.
If you are using GPMC to do a copy/paste of the production GPO, then
you are in fact defining a new GPO, and the prompt is resulting because
GPMC sees you had indicated a specific OU in your paste action which
only makes sense if you had done so by mistake or because you wanted
to link the GPO to the indicated OU. The prompt just helps prevent one
from unintentionally clobbering ones production system, sort of like the
nagging "are you sure you really do want to delete what you just told me
to delete for you"

As far as practices, making the copy is probably a good safeguard, so
that if you edit it your changes would impact only your test OU.
I usually define a new, empty GPO and link this at a higher level than
the others, and do all "test" setttings changes in this GPO. This helps
me self-document what settings differ througout the test process. This
also gives you the alternative (if things go really, really wrong) of just
unlinking and/or deleting the test GPO.
However, I find it equally or more convenient to just link the actual
GPO used in production at a lower priority than the new empty test
use GPO. But then, I DO remember not to edit the production GPO.
Once the tests are complete, I determine into which GPO(s) the set
of new values accumulated in the initially new, empty test GPO
ought to be merged.

Roger

"RandyH" <RHollaw@xxxxxxxxxxx> wrote in message
news:Os8bbdUbHHA.5044@xxxxxxxxxxxxxxxxxxxxxxx
I need to create a test container that is exactly as a two production
containers.

I was right clicking on the GPO in GPMC, choosing copy, and then
selecting my test OU and choose paste, but I am not sure about the prompt
I am getting, "Do you want to link the GPOs that you have selected to
this OU", OK/Cancel.

If I link it, it won't break the production stuff will it?





.

Relevant Pages

  • Re: Copy GPOs?
    ... One has always had the ability to link one GPO to multiple contrainers. ... If you are using GPMC to do a copy/paste of the production GPO, ... GPO used in production at a lower priority than the new empty test ...
    (microsoft.public.windows.server.active_directory)
  • Re: Copy GP structure to child OU structure
    ... So, if I understand correctly, the GPOs already exist in the domain, but you want to replicate a "production" OU structure off of another OU in the same domain? ... If that is correct, then GPO permissions aren't involved since they stay with the GPO, not the links. ... So you could write a script to read from one OU structure and write to another. ... go this route and created a child OU off of the domain root and have set up ...
    (microsoft.public.windows.group_policy)
  • Copy GPOs?
    ... I need to create a test container that is exactly as a two production ... I was right clicking on the GPO in GPMC, choosing copy, and then selecting ... it won't break the production stuff will it? ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy for IE Homepage
    ... I'm about to release WSS 3.0 for production and want to set everyone's ... I know I can use a GPO but am not savvy enough to ...
    (microsoft.public.windows.server.sbs)
  • Re: can I copy a GPO to another OU?
    ... > 1) You can link the existing GPO to the second OU. ... > that you do so without actually copying the policy (IE there is still only ... > one policy, ... I would look in to GPMC. ...
    (microsoft.public.windows.group_policy)