How to export and import Advance audit policis setting between different domains

Question

Hi,

How can I backup and restore GPO settings, including advanced audit policies, across multiple forests and domains? Thanks.

Answer 1

Use a GPO backup and import, not restore. Restore only works in the GPO's original domain; import can apply the backed-up settings to a GPO in another domain or forest.

On the source domain:

Backup-GPO -Name 'Advanced Audit Policy' -Path 'C:\GPOBackups'

Copy that backup to an administrative computer for the destination domain. If the GPO contains domain-specific users, groups, computers, or UNC paths, create a .migtable file with the GPMC Migration Table Editor. Then import into a new, initially unlinked GPO:

Import-GPO `
  -BackupGpoName 'Advanced Audit Policy' `
  -Path 'C:\GPOBackups' `
  -TargetName 'Advanced Audit Policy' `
  -Domain 'target.example.com' `
  -MigrationTable 'C:\GPOBackups\target.migtable' `
  -CreateIfNeeded

Import transfers the policy settings, including Advanced Audit Policy Configuration. It does not recreate the source GPO links or replace the destination GPO's security filtering. Review those separately, compare the GPMC Settings report, and test the imported GPO on a test OU before production deployment.

Sources:

• Back up and restore Group Policy
• Import-GPO
• Advanced Audit Policy Configuration

This answer was drafted with assistance from OpenAI Codex. I reviewed the cited Microsoft documentation before posting.

Answer 2

To migrate GPO settings, including Advanced Audit Policies, across multiple forests and domains, use the built-in Group Policy Management Console backup and restore features . Create a backup of the source GPO using GPMC, then import it into the target domain using the Import Settings wizard.

Before importing, review the backup with Group Policy Management Editor or the GPMC migration table to replace source-domain-specific references, such as users, groups, computers, UNC paths, and security principals. A migration table is especially important when moving between forests because SIDs are different and cannot be resolved automatically.

For Advanced Audit Policies, ensure the target domain has the required Windows security templates and ADMX files available, and verify that the imported GPO contains the audit subcategory settings under Computer Configuration > Policies > Windows Settings > Security Settings > Advanced Audit Policy Configuration. Also enable Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings in the target GPO.

After restoration, link the GPO to the correct OU structure in the target domain and validate the effective policy using gpresult /h, rsop.msc, and auditpol /get /category:*.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin