
Active Directory Administration Cookbook, Second Edition
By :

Group Policy Management does not offer to roll back changes in Group Policy Objects (GPOs). However, when, in the process of modifying GPOs, a step is added to create a backup of the GPOs, inadvertent settings can be rolled back by restoring a previous backup.
This recipe shows what that step would look like and how to restore a GPO.
Sign in to a domain controller or a member server and/or device with the RSAT for Active Directory Domain Services installed. Ideally, the domain controller or member server runs Windows Server 2012, or a newer version of Windows Server.
Sign in with an account that is a member of the Domain Admins group. In contrast to the delegation of creating, linking, managing, editing, and reading GPOs, backing up and restoring GPOs cannot be delegated.
Perform these steps to back up GPOs: