Your network contains an Active Directory domain.
You need to back up all of the Group Policy objects (GPOs), Group Policy permissions, and
Group Policy links for the domain.
What should you do?
A.
From Group Policy Management Console (GPMC), back up the GPOs.
B.
From Windows Explorer, copy the content of the %systemroot%\SYSVOL folder.
C.
From Windows Server Backup, perform a system state backup.
D.
From Windows PowerShell, run the Backup-GPO cmdlet.
Explanation:
http://www.microsoft.com/en-us/download/details.aspx?id=22478
Planning and Deploying Group Policy (.doc)
Links to OUs, however, are not part of the backup data and will not be restored during a
restore operation.
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/c361339f-7266-4991-
8309-c957a123a455/
Permissions are backed up but links are not. The links are actually properties of the OU and
would be backed up as part of the system state. The backup function in GPMC only backs
up the properties of selected GPOs (the settings inside the GPOs as well as Security Filters
and all other things that belong directly to the GPO). It never backs up OU / Site links -these
are not properties of the GPO itself, but of the respective OUs and Sites…
http://sdmsoftware.com/general-stuff/the-clash-of-the-gpo-links/
Group Policy links are stored within the gpLink attribute on an AD container (in the case of
GP, the container is a site, domain or OU object).
http://technet.microsoft.com/de-de/library/cc756808%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc784474%28v=ws.10%29.aspx
Information saved in a backup
Backing up a GPO saves all information that is stored inside the GPO to the file system. This
includes the following information:
GPO globally unique identifier (GUID) and domain.
GPO settings.
Discretionary access control list (DACL) on the GPO.
WMI filter link, if there is one, but not the filter itself.
Links to IP Security Policies, if any.
XML report of the GPO settings, which can be viewed as HTML from within GPMC.
Date and time stamp of when the backup was taken.
User-supplied description of the backup.
Information not saved in a backup
Backing up a GPO only saves data that is stored inside the GPO. Data that is stored outside
the GPO is not available when the backup is restored to the original GPO or imported into a
new one. This data that becomes unavailable includes the following information:
Links to a site, domain, or organizational unit.
WMI filter.
IP Security policy.http://social.technet.microsoft.com/Forums/en/winserverGP/thread/d7c621fc-e0e9-47dda4df-9082b33132a6
For back up all of the Group Policy objets (GPOs Policy permissions, and Group Policy links
for the domain) the answer is C.
For details:
System State data
http://technet.microsoft.com/en-us/library/cc785306(WS.10).aspx