Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Before changing a Windows policy, back up the affected Group Policy Object (GPO) with Group Policy Management Console (GPMC) or the GroupPolicy PowerShell module. If a change causes problems, restore the GPO from that backup in its original domain. For another domain, use Copy or Import Settings instead: restoring a backup is not a cross-domain migration.
Back up a GPO before you edit it
GPO data is stored in both Active Directory and SYSVOL, so copying a folder in File Explorer is not a reliable backup. Microsoft warns: “Don’t interact with archived GPOs directly through the file system.” Use GPMC or the GroupPolicy PowerShell cmdlets instead. Microsoft’s GPO backup and restore guidance explains the supported workflows.
As an Amazon Associate I earn from qualifying purchases.
In Group Policy Management Console
- Open GPMC and expand the forest and domain containing the GPO.
- Under Group Policy Objects, right-click the GPO and choose Back Up. To back up every GPO in the domain, right-click Group Policy Objects and choose Back Up All.
- Choose a writable backup folder, enter a description that identifies the change or date, and run the backup.
- Review the completion summary. Check how many GPOs succeeded and note any failures before proceeding with policy changes.
GPMC supports multiple backup instances of the same GPO. In Manage Backups, you can choose to show only the latest instance; use descriptions to distinguish versions when reviewing them.
Recommended Free Tools
In PowerShell
Run the commands on a system with the GroupPolicy module available and provide a path the account can write to. Microsoft’s Windows Server 2025 reference documents these examples: Backup-GPO syntax and parameters.
#1 Best Overall
- 【Plug-and-Play Expandability】 With no software to install, just plug it in and the drive is ready to use in Windows（For Mac，first format the drive and select the ExFat format.
- 【Fast Data Transfers 】The external hard drives with the USB 3.0 cable to provide super fast transfer speed. The theoretical read speed is as high as 110MB/s-133MB/s, and the write speed is as high as 103MB/s.
- 【High capacity in a small enclosure 】The small, lightweight design offers up to 500GB capacity, offering ample space for storing large files, multimedia content, and backups with ease. Weighing only 0.35 Lbs, it's easy to carry "
- 【Wide Compatibility】Supports PS4 5/xbox one/Windows/Linux/Mac and other operating systems, ensuring seamless integration with game consoles,various laptops and desktops .
- Important Notes for PS/Xbox Gaming Devices: You can play last-gen games (PS4 / Xbox One) directly from an external hard drive. However, to play current-gen games (PS5 / Xbox Series X|S), you must copy them to the console's internal SSD first. The external drive is great for keeping your library on hand, but it can't run the new games.
Backup-GPO -Name "Workstation Baseline" -Path "\servershareGPOBackups"
Backup-GPO -All -Path "\servershareGPOBackups"The first command backs up the named GPO; the second backs up all GPOs in the selected domain context. If display names are duplicated, use the GPO’s GUID to identify it unambiguously. Specify -Domain when the intended domain is not clear from your current context. You can specify -Server to choose a domain controller; if omitted, Microsoft documents that the PDC emulator is contacted.
Choose the right recovery operation
Use Restore to roll back a GPO in the domain where its backup was made. If the goal is to place settings in a different domain, use Copy or Import Settings instead.
Rank #2
- Slim durable design to help take your important files with you
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- Back up smarter with included device management software[2] with defense against ransomware
- Help secure your important files with password protection and hardware encryption
- 3-year limited warranty
| Situation | Operation | What it does |
|---|---|---|
| The changed GPO still exists and you want its earlier state back | Restore from Backup | Replaces the existing GPO’s settings with the selected backup state in the original domain. |
| The GPO was deleted and must be recovered | Manage Backups, then Restore | Restores the deleted GPO from a backup in its original domain. |
| You want a separate GPO based on a current GPO | Copy | Creates a new GPO at the destination. |
| You want backed-up settings in an existing destination GPO | Import Settings | Transfers settings into that GPO without changing its links or security filtering. |
Restore an existing GPO in GPMC
- In GPMC, locate the GPO, right-click it, and choose Restore from Backup.
- Select the backup instance you want to recover and follow the prompts.
Recover a deleted GPO in GPMC
- Open the GPO backup location through GPMC’s Manage Backups workflow.
- Select the backup of the deleted GPO and choose Restore.
Restore with PowerShell
To restore a named GPO from its latest backup, use Restore-GPO -Name. To select a particular backup version, use its backup ID with -BackupId. The backup ID is not the same as the GPO’s GUID. See Microsoft’s Windows Server 2025 Restore-GPO reference.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsRestore-GPO -Name "Workstation Baseline" -Path "\servershareGPOBackups"
Restore-GPO -BackupId <backup-guid> -Path "\servershareGPOBackups"Use -Domain to make the target domain explicit when needed. As with Backup-GPO, Microsoft documents the PDC emulator as the default domain controller when -Server is not specified. Restore-GPO -All restores every GPO represented in the backup directory from its latest backup; use it only when a domain-wide rollback is intended.
Rank #3
- All-in-One Design: 1TB external hard drive, multi-port hub and SD/TF card reader combine to provide ample storage and comprehensive connectivity in a single device for seamless multi-device connectivity to enhance your productivity.
- Multiple Interface Support: The product has a built-in 1TB hard disk and supports USB-C, USB 3.2, USB 2.0, SD card slot and TF card slot, which meets the needs of daily work. The product connects to the computer via data cable to realize multi-device interoperability.
- Dual Socket Data Connection Cable: Equipped with USB 3.2 and USB-C dual socket data connection cable, suitable for more models.
- Wide compatibility: Supports Windows, Mac OS, Linux, Android, iOS （iPhone 15 and Later） and other operating systems. Support Desktops, Laptops, SmartPhones, Tablets, TVs and other devices.
- Note: This is only compatible with Apple devices that have a USB‑C port (including iPhone 15 and later, as well as all iPads with USB‑C). Using a Lightning to USB‑C adapter will not resolve the compatibility issue.
Reuse GPO settings in another domain
A backup restore is limited to the domain where the GPO was backed up. For cross-domain work, decide whether you need a new GPO or want to update an existing one:
- Copy creates a new destination GPO from a current GPO. During the copy, the operator can preserve the source GPO’s discretionary access control list (DACL) or use default permissions, depending on the workflow and permissions.
- Import Settings applies settings from a backed-up GPO to an existing destination GPO. It leaves that destination’s links and security filtering unchanged. Microsoft notes it can be useful without a trust relationship, provided the operator can access the backup and has edit permission on the target GPO.
When source settings refer to domain-specific objects or paths, use the Migration Table Editor during copy or import to map security principals and UNC paths to destination values. Microsoft says the destination values should already exist. References that may need mapping include user-rights assignments, restricted groups, system services, file-system and registry security settings, advanced folder redirection, relevant DACLs, folder-redirection paths, and software-installation paths.
Rank #4
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
A script stored outside the source GPO is not copied along with it. A script stored inside the GPO may be included. Review external dependencies and mappings before relying on the destination policy. Microsoft describes the copy, import, and migration-table workflows in its GPO management guidance.
Use GPMC or PowerShell for repeatable administration
GPMC is available with Windows Server and Remote Server Administration Tools (RSAT). Beyond backup and restore, it supports import, copy, reporting, Group Policy Modeling, and Resultant Set of Policy reporting. See Microsoft’s GPMC overview.
Best Value
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Use the GUI when you want to inspect a backup summary and select a version interactively. PowerShell is useful when the same backup or recovery operation must be repeated or scripted. For either method, make the domain and backup version clear enough that another administrator can verify the intended scope.
Troubleshoot a restore or import that cannot replace a SYSVOL file
One documented GPMC or Import-GPO failure occurs when another process is using a file in the GPO’s SYSVOL share, preventing the operation from obtaining the exclusive file handle it needs. Microsoft’s troubleshooting guidance recommends investigating the process holding the file and trying a different target domain controller where appropriate: GPMC or Import-GPO fails to restore a GPO from backup. This applies to that specific locked-file error; other failures may have different causes.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
