Restoring the SBS GPOs from a Different Server

Restoring the SBS GPOs from a Different Server

  • Comments 2
  • Likes

[Today's post comes to us courtesy of Wayne McIntyre]

As promised here is the 2nd part of our restoring SBS group policies post.  This post will cover moving the SBS 2003 policies from a working server to a server that is missing the SBS policies.

Backup Process:

Please follow the previous post on how to backup the SBS Group Policies as that process is still the same. Once you have the backup, zip the contents so you can transfer it to another server: http://blogs.technet.com/sbs/archive/2007/08/07/how-to-backup-and-restore-your-sbs-and-default-group-policies.aspx

Restore Process:

  1. Extract the contents of the Zip folder to your desired location.
  2. Manually create the 8 SBS policies with the following names:
    1. Small Business Server Auditing Policy (Link at DC OU)
    2. Small Business Server Client Computer
    3. Small Business Server Domain Password Policy
    4. Small Business Server Internet Connection Firewall
    5. Small Business Server Lockout Policy
    6. Small Business Server Remote Assistance Policy
    7. Small Business Server Windows Firewall
    8. Small Business Server – Windows Vista Policy
  3. Right Click on each one individually and select import settings
  4. select next twice, and then it will ask you to point to your backup location, select the location where you had extracted the zip file to earlier
    GPOBackup1.jpg
  5. Click next and you will see a list of the 8 backed up policies, select the corresponding one for each of the 8 policies.
    GPOBACKUPNEW.jpg
  6. Click Next then Finish.
    GPOBACKUP3.jpg

    GPOBackup4.jpg

    GPOBackup5.jpg
  7. Link Each Policy at the domain level by right-clicking your domain name under domains and selecting link an existing GPO here except for the Small Business Server Auditing Policy which is linked at the domain controllers OU.
  8. Click on WMI Filters in GPMC and make sure the WMI filters exist and are linked to the appropriate policies.
    1. PostSP2 should be linked to Small Business Server Windows Firewall
    2. PreSP2 should be linked to Small Business Server Internet Connection Firewall
    3. Vista should be linked to Small Business Server – Windows Vista Policy

      WMI.jpg

Note: If you have SBS 2003 R2 you need to manually recreate the WSUS policies or Reinstall the SBS R2 components. You cannot transfer the policies from one machine to another as the settings are domain/server specific

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment
Comments
  • The Official SBS Blog : Restoring the SBS GPOs from a Different Server: http://blogs.technet.com/sbs

  • Here's an interesting one for you.  I had a swing that had gone *Poof* at one point.   Netlogon didn't come back online and I had to do a forced promotion.  (Not nice!)

    So since Netlogon didn't replicate (even though AD did... weird one) I had a blank Netlogon change with no login scripts, policies etc etc.  But all the references to the GPO were still in the system (It was quite adamantly complaining about not finding the little pests!)  Where is file blah blah?  Where where?!

    Turned out I was able to just "copy" the policy folders from an older copy from under sysvol.  (Original server was hit by a virus and was sick) but AD was ok and the policy files were still there.

    Not a perfect situation but it's one of those things you find on your feet when all is breaking loose.