Your network contains two Active Directory forests named contoso.com and dev.contoso.com. The
contoso.com forest contains a domain controller named DO. The dev.contoso.com forest contains a
domain controller named DC2. Each domain contains an organizational unit (OU) named OU1.
Dev.contoso.com has a Group Policy object (GPO) named GP01. GP01 contains 200 settings,
including several settings that have network paths. GP01 is linked to OU1.
You need to copy GP01 from dev.contoso.com to contoso.com.
What should you do first on DC2?
A.
From the Group Policy Management console, right-click GPO1 and select Copy.
B.
Run the mtedit.exe command and specify the /Domaintcontoso.com /DC: DC 1 parameter.
C.
Run the Save-NetGpocmdlet.
D.
Run the Backup-Gpocmdlet.
Explanation:
To copy a Group Policy object:
In the GPMC console tree, right-click the GPO that you want to copy, and then click Copy.
To create a copy of the GPO in the same domain as the source GPO, right-click Group Policy objects,
click Paste, specify permissions for the new GPO in the Copy GPO box, and then click OK .
For copy operations to another domain, you may need to specify a migration table.
The Migration Table Editor (MTE) is provided with Group Policy Management Console (GPMC) to
facilitate the editing of migration tables. Migration tables are used for copying or importing Group
Policy objects (GPOs) from one domain to another, in cases where the GPOs include domain-specific
information that must be updated during copy or import.
Source WS2008R2: Backup the existing GPOs from the GPMC, you need to ensure that the “Group
Policy Objects” container is selected for the “Backup Up All” option to be available.
Copy a Group Policy Object with the Group Policy Management Console (GPMC)
You can copy a Group Policy object (GPO) either by using the drag-and-drop method or right-click
method.
Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012
Ref: http://technet.microsoft.com/en-us/library/cc785343(v=WS.10).aspx
http://technet.microsoft.com/en-us/library/cc733107.aspx
question states *two separate forests* without mentioning any trust relationship!
GPMC-Copy-Paste only works in the same forest:
https://technet.microsoft.com/en-us/%5Clibrary/Hh967476%28v=WPS.630%29.aspx
therefore I’d go for D
1
0
Agreed with Den. Unless the question is worded incorrectly (one forest with two domains), then it is most likely D.
0
0
Agree with above – No trust relationsip mentioned.
About “Copy” – You can use a copy operation to transfer settings to a new GPO in the same domain, another domain in the same forest, or a domain in another forest. Because a copy operation uses an existing GPO in Active Directory as its source, trust is required between the source and destination domains.
source: https://technet.microsoft.com/en-gb/en-en/library/cc785343(v=ws.10).aspx
0
0
I agree with all above.
The “first” step would be to backup the existing GPO’s. Of the options given only D will perform a backup.
Then you would use the Migration Table Editor (MTEEdit) to bring across the GPOs to the new Forest/Domain.
https://technet.microsoft.com/en-au/library/cc779961(v=ws.10).aspx
——–
The Migration Table Editor (MTE) is provided with Group Policy Management Console (GPMC) to facilitate the editing of migration tables. Migration tables are used for copying or importing Group Policy objects (GPOs) from one domain to another, in cases where the GPOs include domain-specific information that must be updated during copy or import. For information about migration tables
———
But for this question…the _FIRST_ step is option D.
0
0
+1
0
0