What are the steps for importing GPO's from anotehr domain to view the settings before finding out later if there is a problem??

so far have used gpmc export gpo's domain , know can import gpo's new domain using same process.  wondering if there tool or best practice, can use vet process.  need gpo or caused problem in newly built ad ds environment?  hope asked question correctly...

hi,

thanks posting question in forum.

please understand when migrate gpos across domains, users, groups, , computers may referenced in settings of gpo or in access control list (acl) gpo. security principals not transfer across domains several reasons. domain local groups not valid in external domains, other groups valid if trust relationship exists between domains. trust relationship, may not appropriate use exact same group in new domain. if no trust relationship exists, none of security principals in source domain available in destination domain. using migration table, gpmc can used modify references security principals in destination gpo across domains when copying , importing gpos , enables modify settings in case. regarding request, if want check detailed gpo settings before importing domain, we’d better import test domain first , import production domain. details migrating gpos across domains, please try refer following articles.

migrating gpos across domains

http://technet.microsoft.com/en-us/library/cc785343(v=ws.10).aspx

copying , importing gpos across domains

http://msdn.microsoft.com/en-us/library/windows/desktop/aa814145(v=vs.85).aspx

hope helps.

best regards,

andy qi

technet subscriber support

if technet subscription user , have feedback on our support quality, please send feedback here.

---

andy qi
technet community support

Windows Server  >  Group Policy