Duly noted one other query on a similar note
if we do need to restore GPO with GPMC say in the scenario of admin error is it better working practice to DELETE existing GPO, presumably wait for sysvol replication and then restore ?? seems the best way to get the 'clean state' and not have issues say of merged values ?? GT > Yep - but I'd also run the GetReportsForAllGPOs.wsf script during your > backup job - these reports are very useful to discover what may have > changed in a GPO after the last backup... > > /Guido > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner > Sent: Wednesday, August 23, 2006 9:08 PM > To: [email protected] > Subject: RE: [ActiveDir] management of group policy links (GPMC) > > thanks both > > What this is all about is putting in place the necessary operational > practices to > ensure capability to restore in the event of scenario of restore of GPO. > >>From both your notes it seems that with the backups of the GPO's > themselves > (backupallGPOs.wsf) together with the output from ListSOMPolicyTree.wsf > scripts I > have ALL necessary information for the return of the GPO (and the OU to > which it is > linked) to prior state > > Thanks > >> Graham- >> The Inheritance and Delegation tabs (when you're sitting on a > container object > like an OU in GPMC) provides the information indicated below. I guess > I'm > wondering what you're missing from that? Its true that GPMC >> backup/restore does not restore links, link order or Enforced flags, > but there are > 3rd party products that can do this, combining GPO restore with the AD > parts of > that. >> >> Darren >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner > Sent: > Wednesday, August 23, 2006 10:05 AM >> To: [email protected] >> Subject: [ActiveDir] management of group policy links (GPMC) >> >> Dear all, as i recall / understand group policy links are stored as an > attribute >> (gplink) of the OU. >> >> It seems that GPMC is fine at summarising the links on a per OU basis > as you step > down the forest / domain structure. >> >> However it seems to lack a summary of OU / linked GPO(s) / link order > / security > filtering / delegation >> >> Would seem to be helpful in the context of a documentation of an > Active Directory, > especially given the scenario of restore of a GPO which does not look to > restore > links, let alone the link order which would need to be restored somehow > in the > event of GPO restore. >> >> Thanks, as always >> >> GT >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: http://www.activedir.org/ml/threads.aspx >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: http://www.activedir.org/ml/threads.aspx >> > > > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
