0
In fact, the answer is YES!!! With the GPMC, you can most definately accomplish this, and the steps required are, for the most part, relatively straight forward. Microsoft has released a white paper that discusses this very topic which you can download
Wiki User
∙ 12y ago
Wiki User
∙ 12y agoThe easiest way to do this is to make a copy of the original GPO, and then rename it. Then you will have a new GPO with all of the settings of the original. To do this, open the GPMC and drill down to the Group Policy Objects node. Right-click over the GPO you want to use, and select Copy. Then, immediately select Paste. It will create a new GPO named
Add your answer:
Earn +20 pts
What is the order in which GPOs are applied?
Local, Site, Domain, OU Group Policy settings are processed in the following order: 1:- Local Group Policy object-each computer has exactly one Group Policy object that is stored locally. This processes for both computer and user Group Policy processing. 2:- Site-Any GPOs that have been linked to the site that the computer belongs to are processed next. Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the site in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed last, and therefore has the highest precedence. 3:- Domain-processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence. 4:- Organizational units-GPOs that are linked to the organizational unit that is highest in the Active Directory hierarchy are processed first, then GPOs that are linked to its child organizational unit, and so on. Finally, the GPOs that are linked to the organizational unit that contains the user or computer are processed. At the level of each organizational unit in the Active Directory hierarchy, one, many, or no GPOs can be linked. If several GPOs are linked to an organizational unit, their processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the organizational unit in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence. This order means that the local GPO is processed first, and GPOs that are linked to the organizational unit of which the computer or user is a direct member are processed last, which overwrites settings in the earlier GPOs if there are conflicts. (If there are no conflicts, then the earlier and later settings are merely aggregated.)
What are GPO links What special things can you do to them?
Linking GPOs To apply the settings of a GPO to the users and computers of a domain, site, or OU, you need to add a link to that GPO. You can add one or more GPO links to each domain, site, or OU by using GPMC. Keep in mind that creating and linking GPOs is a sensitive privilege that should be delegated only to administrators who are trusted and understand Group Policy. If you have a number of policy settings to apply to computers in a particular physical location only - certain network or proxy configuration settings, for example - these settings might be appropriate for inclusion in a site-based policy. Because domains and sites are independent, it is possible that computers in the site might need to cross domains to link the GPO to the site. In this case, make sure there is good connectivity. If, however, the settings do not clearly correspond to computers in a single site, it is better to assign the GPO to the domain or OU structure rather than to the site.Link GPOs to the domain if you want them to apply to all users and computers in the domain. For example, security administrators often implement domain-based GPOs to enforce corporate standards. They might want to create these GPOs with the GPMC Enforceoption enabled to guarantee that no other administrator can override these settings. Important * If you need to modify some of the settings contained in the Default Domain Policy GPO, it is recommended that you create a new GPO for this purpose, link it to the domain, and set the Enforce option. In general, do not modify this or the Default Domain Controller Policy GPO. If you do, be sure to back up these and any other GPOs in your network by using GPMC to ensure you can restore them.As the name suggests, the Default Domain Policy GPO is also linked to the domain. The Default Domain Policy GPO is created when the first domain controller in the domain is installed and the administrator logs on for the first time. This GPO contains the domain-wide account policy settings, Password Policy, Account Lockout Policy, and Kerberos Policy, which is enforced by the domain controller computers in the domain. All domain controllers retrieve the values of these account policy settings from the Default Domain Policy GPO. In order to apply account policies to domain accounts, these policy settings must be deployed in a GPO linked to the domain, and it is recommended that you set these settings in the Default Domain Policy. If you set account policies at a lower level, such as an OU, the settings only affect local accounts (non-domain accounts) on computers in that OU and its children. Before making any changes to the default GPOs, be sure to back up the GPO using GPMC. If for some reason there is a problem with the changes to the default GPOs and you cannot revert back to the previous or initial states, you can use the Dcgpofix.exe tool to recreate the default policies in their initial state. Dcgpofix.exe is a command-line tool that completely restores the Default Domain Policy GPO and Default Domain Controller GPO to their original states in the event of a disaster where you cannot use GPMC. Dcgpofix.exe restores only the policy settings that are contained in the default GPOs at the time they are generated. The only Group Policy extensions that include policy settings in the default GPOs are RIS, Security, and EFS. Dcgpofix.exe does not restore other GPOs that administrators create; it is only intended for disaster recovery of the default GPOs. Note that Dcgpofix.exe does not save any information created through applications, such as SMS or Exchange. The Dcgpofix.exe tool is included with Windows Server 2003 and only works in a Windows Server 2003 domain. Dcgpofix.exe is located in the C:\Windows\Repair folder. The syntax for Dcgpofix.exe is as follows: Copy Code DCGPOFix[/Target: Domain | DC | BOTH]Table 2.1 describes the options you can use with the command line parameter /Target: when using the Dcgpofix.exe tool. Table 2.1 Dcgpofix.exe Options for Using the /Target Parameter === === {| ! /Target option: ! Description of option | DOMAIN Specifies that the Default Domain Policy should be recreated. DC Specifies that the Default Domain Controllers Policy should be recreated. BOTH Specifies that both the Default Domain Policy and the Default Domain Controllers Policy should be recreated. For more information about Dcgpofix.exe, in Help and Support Center for Windows Server 2003 click Tools, and then click Command-line reference A-Z |}Most GPOs are normally linked to the OU structure because this provides the most flexibility and manageability: * You can move users and computers into and out of OUs.* OUs can be rearranged if necessary.* You can work with smaller groups of users who have common administrative requirements.* You can organize users and computers based on which administrators manage them.Organizing GPOs into user- and computer-oriented GPOs can help make your Group Policy environment easier to understand and can simplify troubleshooting. However, separating the user and computer components into separate GPOs might require more GPOs. You can compensate for this by adjusting the GPO Status to disable the user or computer configuration portions of the GPO that do not apply and to reduce the time required to apply a given GPO.Within each domain, site, and OU, the link order controls the order in which GPOs are applied. To change the precedence of a link, you can change the link order, moving each link up or down in the list to the appropriate location. Links with the lowest number have higher precedence for a given site, domain, or OU. For example, if you add six GPO links and later decide that you want the last one that you added to have the highest precedence, you can adjust the link order of the GPO link so it has link order of 1. To change the link order for GPO links for a domain, OU, or site, use GPMC http://technet.microsoft.com/en-us/library/cc736813.aspx http://technet.microsoft.com/en-us/library/cc757050.aspx
What does Public domain software mean?
"Public domain software" is software that has moved into the public domain. You're free to copy, display, sell, or adapt it. No one owns the copyright on that software.
What can you do to prevent inheritance from above?
IN OOPS Concept. Declare your class as Final. A final class cannot be inherited by any other class. WINDOWS SERVER 2003 ADhttp://wiki.answers.com/Q/What_are_GPO_links_What_special_things_can_you_do_to_them B: You can block policy inheritance for a domain or organizational unit. Using block inheritance prevents GPOs linked to higher sites, domains, or organizational units from being automatically inherited by the child-level. By default, children inherit all GPOs from the parent, but it is sometimes useful to block inheritance. For example, if you want to apply a single set of policies to an entire domain except for one organizational unit, you can link the required GPOs at the domain level (from which all organizational units inherit policies by default), and then block inheritance only on the organizational unit to which the policies should not be applied. source:http://technet.microsoft.com/en-us/library/cc757050(WS.10).aspx
What is domain forwarding?
Domain forwarding is when you make one domain "example1.com" automatically forward a user to another domain "example2.com" in a DNS server.
Sends data from one collision domain to another?
A Bridge
What sends data from one collision domain to another?
A bridge
How do you copy a dos file from one location to another?
"copy <source> <destination>"
Where would one find information on search domain differences?
Examples someone would find information on domain differences would be: Networksolutions is one of the site. Thesitewizard is another one of the site. Domainmonter is another one of the site.
What does a domain transfer do?
A domain transfer is, in effect, to transfer domain name from the management under one registrar to another registrar. In order to process the transfer of your domain, you need to have domain already under your ownership and a registrar that you want to transfer that domain to.
The relationship between two domains in which one domain allows another domain to authenticate its users is known as?
Trust Relationship
When one country claims another as its one that country is under the what of the controlling country?
domain
