Active Directory Administration Cookbook

How it works...

When you create backups of GPOs, the settings for these objects are stored in a backup file. Then, when inadvertent changes are made to these objects, they can be restored from the backup file.

Depending on the purpose of the GPO backup, the location to store the backups can be on the domain controller or in a remote location. Storing on a domain controller may be a good option for a fast restore test, duplicating group policies between Active Directory forests, or versioning. However, for true backups, always use a remote location.

Alternatively, you can implement the Advanced Group Management Tool (AGPM).