Backing up Group Policy (GPOs)

As of this writing, all Group Policy objects are being backed up (if changed since they were last backed up) via the below Powershell script running as part of the Client aspect of the Cyrus Backup Solution.

Note: this must be run from a computer with Remote Server Administration Tools installed.

Backup-GPOs.ps1

  1. In the Group policy Management Console (GPMC) console tree, open Group Policy Objects in the forest and domain containing the Group Policy object (GPO) to back up.
  2. To back up a single GPO, right-click the GPO and then click Back Up. To back up all GPOs in the domain, right-click the Group Policy objects and click Back Up All.
  3. In the Backup Group Policy object dialog box, in the Location box, enter the path for the location in which you want to store the GPO backups, or click Browse, locate the folder in which you want to store the GPO backups, and then click OK.
  4. In the Description box, type a description for the GPOs that you want to back up, and then click Back Up. If you are backing up multiple GPOs, the description will apply to all GPOs you back up.
  5. After the operation completes, click OK.
:!: Important
To secure backed-up GPOs, ensure that only authorized administrators have permission to access the folder to which you are exporting the GPOs.

Additional considerations

  • You must have Read permissions on the GPO and Write permissions on the folder containing the GPO backup to perform this procedure.
  • The backup function also serves as the export capability for GPOs.

To import settings from a Group Policy object:

  1. In the Group Policy Management Console (GPMC) console tree, expand the Group Policy Objects node in the forest and domain containing the Group Policy object (GPO) to import settings.
  2. Right-click the GPO and click Import Settings.
  3. Follow the instructions in the Import Settings Wizard.

To restore a deleted or previous version of an existing Group Policy object:

  1. In the Group Policy Management Console (GPMC) console tree, in the forest and domain containing the Group Policy object (GPO) that you want to restore, locate Group Policy Objects.
  2. Right-click Group Policy Objects and then click Manage Backups.
  3. In the Manage Backups dialog box, in the Backup location box, type the path to the backup folder. You can also use Browse to locate the backup folder.
  4. In the Backed up GPOs box, select the GPO that you want to restore from the list of GPO backups shown, and then click Restore.
  5. When prompted to confirm the restore operation, click OK.
  6. After the operation completes, click OK and then click Close.

Copied from: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754760(v%3dws.11)

  • dr/gpo_backup.txt
  • Last modified: 2019/03/15 17:03
  • by ericclaus