Your network contains two Active Directory forests named contoso.com and dev.contoso.com. The
contoso.com forest contains a domain controller named DC1. The dev.contoso.com forest contains a
domain controller named DC2. Each domain contains an organizational unit (OU) named OU1.
Dev.contoso.com has a Group Policy object (GPO) named GPO1. GPO1 contains 200 settings,
including several settings that have network paths. GPO1 is linked to OU1.
You need to copy GPO1 from dev.contoso.com to contoso.com.
What should you do first on DC2?
A.
From the Group Policy Management console, right-click GPO1 and select Copy.
B.
Run the mtedit.exe command and specify the /Domaintcontoso.com /DC: DC 1 parameter.
C.
Run the Save-NetGpocmdlet.
D.
Run the Backup-Gpocmdlet.
Explanation:
To copy a Group Policy object:
In the GPMC console tree, right-click the GPO that you want to copy, and then click Copy.
To create a copy of the GPO in the same domain as the source GPO, right-click Group Policy objects,
click Paste, specify permissions for the new GPO in the Copy GPO box, and then click OK.
For copy operations to another domain, you may need to specify a migration table.
The Migration Table Editor (MTE) is provided with Group Policy Management Console (GPMC) to
facilitate the editing of migration tables. Migration tables are used for copying or importing Group
Policy objects (GPOs) from one domain to another, in cases where the GPOs include domain-specific
information that must be updated during copy or import.Source WS2008R2: Backup the existing GPOs from the GPMC, you need to ensure that the “Group
Policy Objects” container is selected for the “Backup Up All” option to be available.
Copy a Group Policy Object with the Group Policy Management Console (GPMC)
You can copy a Group Policy object (GPO) either by using the drag-and-drop method or right-click
method.
Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012
References:
http://technet.microsoft.com/en-us/library/cc785343(v=WS.10).aspx
http://technetHYPERLINK “http://technet.microsoft.com/enus/library/cc733107.aspx#_blank”.microsoft.com/en-us/library/cc733107.aspx
WHY NOT c?
With the cmdlet Backup-GPO can in the domain dev.certbase.de a backup be created by GPO1. Subsequently, the policy settings in the certbase.de domain can import GPO be imported into a new GPO. The direct restore a backup of a GPO to another forest is not possible. Copying a GPO via the functions “Copy” and Paste “the Group Policy Management is also not over the border of a forest possible. The cmdlet save NetGPO saving changes to its cached local GPO and Mtedit.exe starts the migration table editor.
???
0
0
I think it’s D, the Backup-GPO Cmdlet…..
0
1
Think so as well, there is no known trust.
0
0
It has to be Backup-GPO since the question does not stated that there is trust between the Forest
0
1
Agree. There is no clearification that a trust is established, so a full backup and restore in the other forrest should be done.
0
0
dev.contoso.com and contoso.com says about trust relationship
0
0
It says there are two forests which implies that there is no trust
0
0
no it doesn’t. I create dev.contoso.com on my network and you create contoso.com on yours and we don’t even notice each other. And I can backup a GPO and send it to you.
Answer is D.
0
1
I also vote for D.
We can’t copy GPO because we don’t know if trust relationship exist. Thus we need to back up GPO and import it in another domain with use of migration table.
The following article can clarify things
https://msdn.microsoft.com/en-us/library/aa814151(v=vs.85)
0
1
I just found this : https://technet.microsoft.com/en-us/library/hh967480(v=wps.630).aspx
They don’t mention copying from domain A to domain B , they use it for backup .. and backup to a folder.
A is the only correct answer for 2012 R2
1
0
jay z – the link you provided is for the command backup-gpo, so I think you meant the correct answer is D.
0
0
“Your network contains two domains…”
wouldn’t that state trust if under one network? Hence, copy would be the better option in my opinion.
0
0
“Your network contains two Active Directory forests”… not domains. Therefore, no trust is stated. I believe that the question specifically says forests, rather than domains, to hint that a trust is not established. Therefore, the correct answer is D.
0
0
Confusion on this question is based on incorrect wording of the question. Both domains are referred to as forests when it appears based on the answer that we are dealing with a domain and a sub domain. A domain and sub domain would have a default 2 way trust. If it is in fact a domain and sub domain then the copy paste would work.
Based on wording of the actual MS test questions, I would assume we are dealing with a domain and sub domain. There are typos on numerous questions on this site.
1
0