Active Directory, Sysvol

How to restore Active Directory Group Policy with only SYSVOL data

1) Create new, blank Group Policy

Using GPMC.msc create a new, blank GPO with the same name as the original.

Creating new blank GPO in GPMC console

2) Overwrite Group Policy Data

a) Record the Unique ID that was assigned to GPO created in Step 1

GPO properties showing Unique ID

b) Copy Machine, User and GPT data from original GPO

SYSVOL GPO folder contents to copy

c) Paste data (overwrite) into the folder assigned to GPO created in Step 1. The folder is named the same as the Unique ID recorded in Step 2a

Pasting GPO data into new GPO SYSVOL folder

3) Fixing Group Policy Settings Preview

Note that after completing Step 1 and Step 2, even though the GPO settings are available within Edit, the Settings Preview shows No settings defined

GPO Settings tab showing No settings defined

a) Edit GPO, browse to any unconfigured setting and open it. Tick and untick Define this policy setting and click OK

Toggling Define this policy setting to refresh GPO

b) If your GPO contains any Preferences browse to any one of them and simply open it and click OK

Opening GPO Preference item to trigger settings refresh

Settings Preview should show settings

GPO Settings tab now displaying restored settings

4) Fixing Group Policy Permission

Unfortunately following this process does not restore the original permissions, this has to be added back manually.

Leave a Reply