Re: Exporting GPOs from Active Directory

From: juan.francisco.falcon@ar.pwcglobal.com
Date: 07/23/02 

To: "Laura A. Robinson" <larobins@bellatlantic.net>
From: juan.francisco.falcon@ar.pwcglobal.com
Date: Tue, 23 Jul 2002 12:34:21 -0300

Another way of exporting GPOs is using a "script" develop by Microsoft.

This tools can be obtained when you install "Intellimirror Scenarios" a set
of GPOs for securing the workstations.

Intellimirror Scenarios can be downloaded from the Ms site.

Hope this help.

Juan Falcón

"Laura A. Robinson" <larobins@bellatlantic.net> on 22/07/2002 04:40:42 p.m.

Please respond to "Laura A. Robinson" <larobins@bellatlantic.net>

To: "David Vincent" <david.vincent@mightyoaks.com>, "Focus-Ms (E-mail)"
       <focus-ms@securityfocus.com>
cc:
Subject: Re: Exporting GPOs from Active Directory

Doh! Read "GPOs" as "OUs"! Sorry folks!

With that said, secedit does not export Group Policy Objects. It allows you
to export the security settings from that section of the machine's policy,
but it does not export GPOs.

There is no officially supported method for exporting GPOs. However, there
are a couple of ways to do it:

1. Purchase FAZAM (http://www.fullarmor.com)
2. Read these links:

http://www.jsifaq.com/SUBK/tip5300/rh5320.htm
http://www.mike-tech.com/article.php?gif=win2k&article=147

Laura
----- Original Message -----
From: "David Vincent" <david.vincent@mightyoaks.com>
To: "'Laura A. Robinson'" <larobins@bellatlantic.net>; "Focus-Ms (E-mail)"
<focus-ms@securityfocus.com>
Sent: Monday, July 22, 2002 1:16 PM
Subject: RE: Exporting GPOs from Active Directory

> sorry laura, but i do believe you are confused.
>
> you want to use 'secedit' to export GPOs, LDFIDE exports lists of AD
objects
> in Line Delimited format, it is the partner to CSVIDE which exports AD
> contents into Comma Seperated Values.
>
> check the help for more info on 'secedit' or the usual 'c:\secedit /?'
>
>
>
>
> David Vincent CNA/MCSE
> Network Administrator
>
> www.mightyOaks.com
> david.vincent@mightyoaks.com
>
>
>
>
> -----Original Message-----
> From: Laura A. Robinson [mailto:larobins@bellatlantic.net]
> Sent: July 22, 2002 9:58 AM
> To: hbcsc502@csun.edu; focus-ms@securityfocus.com
> Subject: Re: Exporting GPOs from Active Directory
>
>
> You can use LDIFDE to do this. LDIFDE (LDIF Directory Export, IIRC) is a
> command-line utility installed on Windows 2000 server boxes that allows
you
> to import/export/modify LDAP directories using text files. The utility is
> not installed on Win2K pro boxes even with adminpak, but it should be on
any
> of your server installations.
>
> If you're running it from a DC, you would just open a command prompt and
> type
>
> ldifde -f <name of file to export to>
>
> There'd be other options you would have to type depending on the
credentials
> you want to use to connect and how much you want to export, but the
utility
> is relatively self-explanatory.
>
> Some additional info:
>
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulks

> teps.asp
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q263991&
>
> Laura
> ----- Original Message -----
> From: "Phydeaux" <hbcsc502@csun.edu>
> To: <focus-ms@securityfocus.com>
> Sent: Monday, July 22, 2002 1:55 AM
> Subject: Exporting GPOs from Active Directory
>
>
> > Hello all,
> >
> > Does anyone know how to export GPOs in an Active Directory to the .inf
> > files? I am looking for a native utility from Microsoft ore another
free
> > tool. Also on the flip side, how do I import settings into a GPO?
> >
> > Brian
> >
>

_________________________________________________________________
       The information transmitted is intended only for the person or
       entity to which it is addressed and may contain confidential and/or
       privileged material. Any review, retransmission, dissemination or
       other use of, or taking of any action in reliance upon, this
       information by persons or entities other than the intended recipient
       is prohibited. If you received this in error, please contact the
       sender and delete the material from any computer.

Relevant Pages

  • Re: Exporting GPOs from Active Directory
    ... Exporting GPOs from Active Directory ... secedit does not export Group Policy Objects. ...
    (Focus-Microsoft)
  • RE: Exporting GPOs from Active Directory
    ... Exporting GPOs from Active Directory ... secedit does not export Group Policy Objects. ... There is no officially supported method for exporting GPOs. ... > There'd be other options you would have to type depending on the ...
    (Focus-Microsoft)