GPMC Import Problem

[John]

Hi,

We are currently rolling out W2K/AD servers to some 300
schools. Each school is a forest in its own right. We
have been using GPMC to import policy settings. This was
working fine using migration tables to do domain specific
bits up until yesterday.

We can import the policy settings OK but now we are
unable to edit the Default Domain Policy or the Default
Domain Policy after the import.

Any help would be gratefully received.

 

[Neil Ruston]

Did you import the DACLs assigned to the GP objects as
well as the settings themselves?

If so, only the admins from the source domain/forest have
rights to edit the GP objects copied.

When copying/importing, remember to translate domain names
so all source references are changed to destination domain
references.

HTH,
Neil

 

[John]

Just the settings.....

We have successfully imported settings at about twenty
sites now, the last two manifested this problem, which I
have managed to replicate on two test networks. Both test
networks were using settings imported via GPMC quite
happily. I have re-imported the same settings using the
same laptop with the same backed up GPOs and now I am
unable to edit the Default Domain Controllers Policy and
the Default Domain Policy. It is only affecting those two
policies. Policies applied to OUs are still working OK.

I have checked permissions and everything appears to be in
order.

Im confused......