Microsoft Windows – Copy/Migrate GPO from one domain to another

Release date: June 20th 2019

Welcome to my Microsoft Tips & Tricks section. Previously, I have covered setting up a secondary domain and trust between the domains/forests. I did this because a customer of mine asked about VMware Horizon and multi-domain setup. Now, I have to copy some GPO’s from the ad.admin.frelab.net domain to frelabtest.net domain. This little session will cover how I did this.

First, I log in to one of my dc’s in the ad.admin.frelab.net domain. Open Group Policy Management and select the GPO I want to copy via backup/import settings, in this case it is named: «2016SRV_VDI_UEM_Settings». I right-click and choose «Back Up…»

MigrateGPO-01

 

I select the location for where the files will be backed up to and provide a “somewhat” informative description, Next…

MigrateGPO-02

 

Once the the backup finishes successful, OK

MigrateGPO-03

 

I browse to my backup destination and verifies the backup up GPO-files. I copy this folder to the C:\GPOBackup-folder on the domain controller in the frelabtest.net domain.

MigrateGPO-04

 

I open Group Policy Management on dc-01.frelabtest.net and create an empty GPO named «2016SRV_VDI_UEM_Settings»

MigrateGPO-05

MigrateGPO-06

 

I right-click my new GPO and choose «Import Settings…»

MigrateGPO-07

 

The “Import Settings” wizard launches, Next…

MigrateGPO-08

 

As my GPO is empty, I won’t do any backup of this prior to importing the settings, Next…

MigrateGPO-09

 

I select the folder containing my backup, Next…

MigrateGPO-10

 

My backup up GPO shows up nicely, Next…

MigrateGPO-11

 

Once the scanning is done, Next…

MigrateGPO-12

 

I won’t adjust any security principals etc. at this point, Next…

MigrateGPO-13

 

Finish…

MigrateGPO-14

 

Green and successful is always nice, OK…

MigrateGPO-15

 

At this point I will adjust some security filtering and settings prior to linking the GPO to the appropriate OU.

MigrateGPO-16

 

MigrateGPO-17

 

This procedure could also have been done using powershell, which I will cover at a later point in time.

 

Microsoft Tips & Tricks section

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.