Migration of Group Policy and Password

  • 118 Views
  • Last Post 06 September 2016
manasrrp6 posted this 05 September 2016

Please suggest me how to migrate Group Policy and Password from legacy Windows Server 2003 to Windows Server 2008 after I migrate the Active Directory.

 

 

 

cid:image002.gif@01D14ECD.C6D1DE80

Skype : manasrrp6

 

Grass-road.jpg

Plant some tree and save our planet. Keep environment green and cool.

 

Order By: Standard | Newest | Votes
SmitaCarneiro posted this 06 September 2016

You could backup group policies and then import those settings into a new group policy in the new AD. Check out migration tables too.

 



Smita Carneiro, GCWN

Active Directory Systems Engineer

IT Security and Policy

Ross Enterprise Center

3495 Kent Avenue, Suite 100

West Lafayette, IN 47906



 

show

daemonr00t posted this 06 September 2016

You might wanna Google for Central Policy Store and ADM removal too.

Cheers,

 

Danny

Sent from

Mail
for Windows 10

 

show

OrionWithrow posted this 06 September 2016

Or look in to Dell ADMM

Orion Withrow


On Sep 5, 2016, at 11:40 PM, Danny CS <daemonroot@xxxxxxxxxxxxxxxx> wrote:
You might wanna Google for Central Policy Store and ADM removal too.Cheers, DannySent from Mail for Windows 10 From: Carneiro, Smita A.
Sent: Monday, September 5, 2016 6:58 PM
To: 'ActiveDir@xxxxxxxxxxxxxxxx'
Subject: RE: [ActiveDir] Migration of Group Policy and Password You could backup group policies and then import those settings into a new group policy in the new AD. Check out migration tables too. Smita Carneiro, GCWNActive Directory Systems EngineerIT Security and PolicyRoss Enterprise Center3495 Kent Avenue, Suite 100West Lafayette, IN 47906 From: ActiveDir-owner@xxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxx] On Behalf Of Manas Dash
Sent: Monday, September 5, 2016 10:02 AM
To: ActiveDir@xxxxxxxxxxxxxxxx
Subject: [ActiveDir] Migration of Group Policy and Password Please suggest me how to migrate Group Policy and Password from legacy Windows Server 2003 to Windows Server 2008 after I migrate the Active Directory.   <image004.jpg><image005.gif>Skype : manasrrp6 <image006.jpg>Plant some tree and save our planet. Keep environment green and cool. 

PARRIS posted this 06 September 2016

Are you migrating to a new forest or are you doing an in place upgrade?





Regards,



 



Mark Parris



 



Active Directory & Cloud Security Consultancy.



 



MVP Enterprise Mobility | MCM Directory Services



Mobile: +44 7801

690596




E-mail: mark@xxxxxxxxxxxxxxxx 



 

Twitter | Blog | LinkedIn | Skype |About.me

 

show

manasrrp6 posted this 06 September 2016



















To a new Forest and new Domain

from 2003 to 2008



 



 







 



 







cid:image002.gif@01D14ECD.C6D1DE80



 



+91 9437615424



+91 9777469626



Skype :

manasrrp6



 



Grass-road.jpg



Plant some tree and save our planet. Keep environment green and

cool.







 

show

SmitaCarneiro posted this 06 September 2016

Orion, are you referring to Dell Migration Manager? That helps with machines and user migration, but not Group Policies. At least not the version I am used to.

 



Smita Carneiro, GCWN

Active Directory Systems Engineer

IT Security and Policy

Ross Enterprise Center

3495 Kent Avenue, Suite 100

West Lafayette, IN 47906



 

show

darren posted this 06 September 2016

You can certainly use GPMC Backup and Import (along with migration tables) to essentially freight-lift your GPOs from the old forest to the new, but typically in these situations,

I suggest that folks take the migration as an opportunity to look at how you are doing GP and re-think/optimize the approach for the new environment. Also note that migration tables are very old technology, and don’t support migrating settings within GP Preferences

at all (not to mention a variety of other new policy areas that contain user/group principal references). So, rather than just backing up and dragging the cruft with you, you might want to look at the GPOs you currently have and see if they are all still needed,

if they still make sense in the new domain and validate that they’ve been linked/deployed in a way that is manageable going forward.

 

Darren

 

 

 

show

Close