SBS 2008 uses 2 default policies along with 9 “SBS specific” policies that provide the centralized management and configuration for the SBS 2008 environment. In cases where a policy was accidentally deleted or where policies were removed, there will be a need to restore these policies once the issue has been resolved. The following steps walk you through the process of creating a backup for the existing group policies, restoring them and re-linking policies in SBS 2008.
Open Group Policy Management Console from Administrative tools or by running gpmc.msc.
From within the Group Policy Management Console expand Forest, Domains, SBS Server, Group Policy Objects.
Right click on Group Policy Objects and select “Back Up All”.
Specify a location and a description for your backup file.
The folder location must already exist – Backup will not create the folder for you.
Click the “Back Up” button. Once the backup is complete, it will return the number of GPO’s that were included in the backup and if it was successful.
Please note that in the screenshot below all of the SBS Group Policy Objects are missing. The default GPO’s are still in place. Restoring the Default Policies can be done through this type of backup.
If you do not have a backup for the Default Domain Policies, steps on “how-to” manually restore the Default GPO’s to the SBS server are not covered in this blog. This will be covered in a future blog.
To restore the SBS Group Policies, open Group Policy Management Console, right click on Group Policy Objects and select Manage Backups.
Select the Group Policy object you want to restore and select restore
You can only restore one GPO at a time.
Restore all of the Group Policies that are missing from the Group policy Objects GPO.
When you select a Group Policy that was restored, you will see that the “Links” window and “Security Filtering” window are blank.
Re-link the restored Group Policies:
Link the Domain Level GPO’s:
Under Domains, highlight the SBS domain, right-click and select “Link an Existing GPO”.
The “Select GPO” window will open.
Select the following GPO’s
Windows SBS Users Policy
Windows SBS CSE Policy
Update Services Server Computer Properties
Update Services Common Settings Properties
Update Services Client Computer Properties
Then select “OK”.
Link the Windows SBS Client policies:
Under Domains, Select your SBS domain, MyBusiness, Computers, SBSComputers, right-click and select “Link an Existing GPO”. The “Select GPO” window will open. Select the following GPO’s.
Windows SBS Client – Windows Vista Policy
Windows SBS Client – Windows XP Policy
Windows SBS Client Policy
Then select “OK”.
Link the Folder Redirection Policy:
Under Domains, Select your SBS domain, MyBusiness, Users, SBSUsers, right-click and select “Link an Existing GPO”. The “Select GPO” window will open.
Select “Small Business Server Folder Redirection Policy” GPO
Once you are finished, the Group Policy Management Console should look like this:
Windows SBS Client – Windows Vista Policy, Windows SBS Client – Windows XP Policy, Windows SBS Client Policy have WMI filters associated with them. These filters will be associated with the group policy during the restore.
These steps cover GPO backup and restore to the same server only. There is a similar but different procedure if you want to restore backups from one SBS Server to another. This scenario will be covered in an upcoming blog post.