Quantcast
Channel: Security and Compliance Management forum
Viewing all articles
Browse latest Browse all 481

SCM v.3.0 - "Invalid data" exporting GPO backup - Domain changes to "contoso.com"

$
0
0

Hi,

I've found that I've been unable to import on AD GPM console certain policies exported from SCM.

Scenario is as follows: 

* Correctly imported GPO on SCM from GPO backup

* Modifications are made on this imported GPO on SCM and later exported to a new GPO backup

When I try to import that backup on a newly created policy on AD GPM, the process stops giving the following error "Data is Invalid".

Looking a bit deeper on Event Viewer I've found that this is caused because the domain of the imported policy does not match.

------------------------------------------

                     

Import of backup failed. Error [The data is invalid.]. 
 Details - 
     Backup
         Directory: The data is invalid.

         Instance : C:\Policy\xxxxxx
         Comment  : {c35daadf-8944-401b-bcfe-xxxxxxxxx}

         Source GPO:
             DisplayName: Modified_GPO
             ID: Common Baseline
             Domain: {96BB1CBE-E589-4397-B3B8-XXXXXXXXXXX}


Destination GPO:
             DisplayName: contoso.com
             ID: New_Policy_Import
             Domain: {8F01D014-F3F0-4267-9186-BC3E259902BA}

Having a look on the backup.xml file I see some more contoso.com entries: </NetBIOSDomainName><DnsDomainName><![CDATA[contoso.com]]></DnsDomainName><UPN><![CDATA[Enterprise Admins@contoso.com]]

Why is the destination GPO stamped with domain "contoso.com" instead of it's original domain name?

Is there any way to force the source GPO Domain name?

Thanks.




Viewing all articles
Browse latest Browse all 481

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>