I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou structure, users and security groups etc. All simple powershell commands and a little logic.

However I am blocked on group policy. I have tested by backing up an existing simple group policy object that grants a user a specific permission. Tried to restore backup on new identical domain controller. Wont work. Created empty group policy object and imported settings. Cannot resolve identity.

Any ideas?