A.1. Migrating Group Policy Objects between Domains

For years, I stood in front of large audiences and recommended testing the power of GPOs in a test forest. In return, I'd get blank stares because this advice was inherently impractical. Sure, it was safe—safer than testing GPOs in production—but ultimately my advice was doomed. How can you do the hard work in a test domain, test it, debug it, get it all right, and then lift it out of its original test lab universe and put it in production? Answer? Until the GPMC, you couldn't.

These examples will continue with our fictional multidomain environment. You can flip back to Figure 5.7 to see the relationship between our three domains: Corp.com, Widgets.corp.com, and the cross-forest trust between ...

Get Group Policy: Fundamentals, Security, and Troubleshooting now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.