Re: Exporting GPOs from Active Directory

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 07/22/02 

From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: <hbcsc502@csun.edu>, <focus-ms@securityfocus.com>
Date: Mon, 22 Jul 2002 12:57:57 -0400

You can use LDIFDE to do this. LDIFDE (LDIF Directory Export, IIRC) is a
command-line utility installed on Windows 2000 server boxes that allows you
to import/export/modify LDAP directories using text files. The utility is
not installed on Win2K pro boxes even with adminpak, but it should be on any
of your server installations.

If you're running it from a DC, you would just open a command prompt and
type

ldifde -f <name of file to export to>

There'd be other options you would have to type depending on the credentials
you want to use to connect and how much you want to export, but the utility
is relatively self-explanatory.

Some additional info:
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulks
teps.asp
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q263991&

Laura
----- Original Message -----
From: "Phydeaux" <hbcsc502@csun.edu>
To: <focus-ms@securityfocus.com>
Sent: Monday, July 22, 2002 1:55 AM
Subject: Exporting GPOs from Active Directory

> Hello all,
>
> Does anyone know how to export GPOs in an Active Directory to the .inf
> files? I am looking for a native utility from Microsoft ore another free
> tool. Also on the flip side, how do I import settings into a GPO?
>
> Brian
>