Corrupt default domain policy

  • Thread starter Thread starter Pete
  • Start date Start date
P

Pete

We think we have a corrupt default domain policy in our Win2K domain.

Is there any way I can recreate or restore it? I seem to remember reading an
article along those lines but I've searched and can't find it any longer.

Thanks
Pete
 
Pete,



GP is in the system state backup, so you can restore it if you have a system
state of DC within 60 days. You will need to touch the files under the GUID
so they have a higher timestamp for FRS to replicate out to other DC. You
also will need to modify the GPT.ini so it matches the version in AD if
version you restored is an older version.



- The Default Domain policy is located under
\Winnt\sysvol\sysvol\<domainname>\policies\
{31B2F340-016D-11D2-945F-00C04FB984F9}

- The Default Domain Controller policy is located under:
\Winnt\sysvol\sysvol\<domainname>\policies\
{6AC1786C-016F-11D2-945F-00C04fB984F9}



If you don’t have the backup or don’t feel comfortable editing the files,
please call PSS to help rebuild the default domain policy.



BTW, on 2003 domain controller, you can use “Dcgpofix” to restore the
default GPO to the default state.



Hope the information helped.



Sincerely,
Ming Chen, MCSE, MCSA, MCDBA, CNE
Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please Reply to Group via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided AS IS with no warranties, and confers no rights.
 
Thanks for that but in the end we got onto Microsoft and they sent us
'recreatedefaultpol.exe' which did the trick with no messing around or
backup tapes.

Thanks anyway
Pete
 
Pete.
Where did you get 'recreatedefaultpol.exe' file from.
I have been looking for something like this for our test servers, do you
have a link or can you email it to me 8-).
Regards
Don
(e-mail address removed)
 
Back
Top