Subscribe to Windows IT Pro
May 24, 2005 12:00 AM

Importing Security Settings into a GPO

Windows IT Pro
InstantDoc ID #46277
Rating: (0)

How can I transfer the security settings in one Group Policy Object (GPO) to another GPO?

Unfortunately, you can't export a GPO's security settings. However, you can use the Secedit command with the /export and /mergedpolicy switches to create a security template that comprises all the security policies defined on the computer. Then you can import that template into a GPO. After creating the template, maneuver in Group Policy Management Console (GPMC) to Computer Configuration, Windows Settings, and right-click Security Settings. Select Import and specify the template you just created.

This method works flawlessly for transferring settings between GPOs in the same forest but might cause a problem if your GPOs are in different forests. Security templates store SIDs for any users or groups referenced by policies in the template. A GPO that you import from another forest will recognize the well-known SIDs of built-in users and groups but not those of users or groups created by the administrator in the other forest. Any unrecognized SIDs will be ignored.

Related Content:

ARTICLE TOOLS

Comments
    There are no comments to display. Be the first one!
You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.