Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

PolicyMaker to Group Policy Preferences migration using Full Article

PolicyMaker to Group Policy Preferences migration using Full Article — Fri, 19 Jun 2009 14:19:54 GMT

PingBack from http://www.ditii.com/2009/06/19/policymaker-to-group-policy-preferences-migration-using-full-article/

How do I migrate PolicyMaker Items to Group Policy Preference Items?

Group Policy Team Blog — Sat, 20 Jun 2009 03:25:40 GMT

PolicyMaker customers have been waiting for an easy way to migrate their PolicyMaker settings over to

Fra PolicyMaker til Group Policy Preferences med GPPMIG

Jakob H. Heidelberg - IT filosof :) — Sat, 20 Jun 2009 11:30:40 GMT

Microsoft har lovet det længe - og nu har de opfyldt deres løfte - PolicyMaker (Standard

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

copycon — Mon, 22 Jun 2009 20:20:51 GMT

Are there any plans in place to include the ability to configure Application and Mail profile settings with GPP?

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

Technet user — Sat, 27 Jun 2009 00:01:14 GMT

According to the system requirements you have to have be a Domain administrator to use GPPMIG.

Where does that leave the rest of us who still need to migrate Policy maker items within our OU but are not Domain admins?

The only solution I have found is to manually copy the PolicyMaker item to a text file, edit the file to use the Group Policy Preferences clsid, then paste into preferences item in new gpo.

Is this going to change in the future?

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

mstephen — Mon, 29 Jun 2009 15:48:02 GMT

Hello Copycon,

Sometime ago there was a discussion regarding Application and Mail GPP settings. It's a common request that has been communicated to the Office team. That is the last I heard.

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

mstephen — Mon, 29 Jun 2009 15:59:49 GMT

The Domain Admins requirement in GPPMIG is not a hard coded requirement. It is required because by default Domain Admins have permissions to all GPOS. The application itself does not specifically check if the user is a member of domain admins. In theory, if the user account has the appropriate permissions to both sysvol and AD portions of the GPO, then it should work; however, it was not tested.

Manually copying or editing the xml file can be done; however, exercise care with certain items and filter settings. It is very easy to make these files uncomprehensible to the client. To be clear though, the process you describe is not supported.

There are no plans to change GPPMIG; however, as stated perviously, the application should not limit your ability to migrate provided the user has the proper permissions.

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

rbmadison — Thu, 20 Aug 2009 16:33:52 GMT

GPPMIG does not work with policymaker 2.5!

See:

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/91cf5529-58c8-4362-9419-82f16b806d53

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

mstephen — Thu, 20 Aug 2009 18:01:51 GMT

rbmadison,

GPPMIG only works with the purchased version of PolicyMaker 2.5. You can direct questions to gppmsup@microsoft.com. You should include a debug log file. You create the log file by adding -loglevel:7 to the end of the command line. The log file is created in the current working directory.

Mike Stephens

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

rbmadison — Thu, 20 Aug 2009 20:32:30 GMT

Thanks Mike. It is the purchased version of policymaker. Please read the linked post for more information. All of what you are referring to has been tried already. Thanks for the suggestions though. If you have any other ideas after reading the linked post please us know.

re: Migrating from PolicyMaker to Group Policy Preferences with GPPMIG

mstephen — Thu, 20 Aug 2009 21:22:38 GMT

rbmadison,

You should probably resend your debug log to the email address provided in the last comment because it did not make it. I know the log did not arrive because I would have received a copy. You may have a legitamite problem, and their might be a work around. However, without the debug log, suggesting anything would be guessing.

Mike Stephens