How to Restore Your Group Policy Settings Using NetWrix Group

How to Restore Your Group Policy Settings

Using NetWrix Group Policy Change Reporter

1. Why Restoring Group Policy Settings?

Sometimes changes made to the Group Policy settings may seem unsatisfactory and you may want to restore one of your

previously saved back-up points. The restoration procedure described in this document will help you dealing with this.

2. Required Pre-requisites

2.1. Enable Additional Windows Features

NetWrix Group Policy Change Reporter requires GPMC to enable the snapshoting capability. If you do not have the GPMC

installed please follow the instructions described in the paragraph 2.1.1. below, otherwise skip it.

2.1.1. Enable Microsoft Group Policy Managing Console:

Windows XP, Windows 2003, Windows Vista pre SP1

The instructions on how to download and install Microsoft Group Policy Management Console can be found by

following this link:

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx#EOC

Windows Vista SP1 and Windows 7

1. The instructions on how to download and install Remote Server Administration Tools can be found by following

this link:

http://www.microsoft.com/downloads/details.aspx?FamilyID=7D2F6AD7-656B-4313-A005-4E344E43997D

Please be cautious: there are different versions for 32-bit and 64-bit systems. Please choose the one suitable for you.

2. Go to Control Panel -> Programs -> Windows Components Features – make sure all the items in Remote Server

Administration Tools are selected.

Windows 2008 server or 2008 server R2:

Go to Control Panel -> Programs -> Windows Components Features – make sure all the items in Remote Server

Administration Tools are selected.

2.1.2. Install Group Policy Change Reporter

Prior to using the restoration feature please install and configure NetWrix Group Policy Change Reporter and perform

the data collection task at least once. Also make sure that “Collect Group Policy information” (for the Basic

configuration utility) or “Enable Group Policy change reporting” (for the Full-featured configuration utility) is checked.

Installation Note: The Group Policy Change Reporter is currently shipped as a part of Active Directory Change

Reporter. The product has a configurable option to audit either Group Policy or Active Directory, or even both at once.

You can install the program on any computer in the managed domain (not necessarily a domain controller). For details

about Active Directory Change Reporter installation and usage please refer to the corresponding documentation

available at

http://netwrix.com/download/QuickStart/Active_Directory_Change_Reporter_Quick_Start.pdf

3. How to Use GPO Restoration

Figure 1: Manage Backups dialog window

1. Please go to Start -> Run, type "gpmc.msc"

2. In the “Group Policy Management Console”, expand the “Forest: <your forest name>” node (where <your forest name>

is the actual name of your forest), right-click Domains, select “Manage Backups” from the drop-down context menu.

3. In the “Manage Backups” dialog, click “Browse...” and point the folder with Group Policy backup files(*). The folder

name is usually the same as the date you want to restore on.

4. You will see the list of Group Policy objects backed up on the selected date (Figure 1). You can click the “Restore”

button to restore your GPO settings from the specified back-up point.

(*) - Backups are stored inside the folder where Group Policy Change Reporter stores snapshots and event log

information for its change reports.

Here is the full example path:

C:\Documents and Settings\All Users\Application Data\NetWrix\Management Console\Data\AD

Changes\nwx.local\2009_5_26_7_0_14.gpcr

For the previous versions of Group Policy Change Reporter product:

C:\Program Files\NetWrix\AD Change Reporter\AD Changes\nwx.local\2009_5_26_7_0_14.gpcr

Note: On your system instead of "Nwx.local" there will be the name of your actual Windows domain.

Instead of "2009_5_26_7_0_14.gpcr" you can select any folder with .gpcr extension (these folders contain GPO

backups for specified date and time - in this example May 26, 2009, AM7:00:14).

4. Disclaimer

The information in this publication is furnished for information use only, does not constitute a commitment from NetWrix

Corporation of any features or functions discussed and is subject to change without notice. NetWrix Corporation assumes

no responsibility or liability for any errors or inaccuracies that may appear in this publication.

NetWrix is a registered trademark of NetWrix Corporation. The NetWrix logo and all other NetWrix product or service

names and slogans are registered trademarks or trademarks of NetWrix Corporation. Active Directory is a trademark of

Microsoft Corporation. All other trademarks and registered trademarks are property of their respective owners.