"Default Domain Controllers Policy" is gone. Help!!

  • Thread starter Thread starter Steve Stormont
  • Start date Start date
S

Steve Stormont

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them is
"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory back
to the \sysvol\domain\policies folder?

Steve
 
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

Steve Stormont said:
I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them is
"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory back
to the \sysvol\domain\policies folder?

Steve
Click to expand...
 
So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access

\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them
is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory
back

to the \sysvol\domain\policies folder?

Steve
Click to expand...
Click to expand...
 
Hi Steve,

Yes.

View, print, and save a report of Group Policy object settings
http://www.microsoft.com/technet/pr...elp/7e1bdb8f-f973-4a02-9b1c-b02331c7ccc7.mspx

br,
Denis

Stephen Stormont said:
So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
Click to expand...

\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
Click to expand...

\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
Click to expand...

\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
Click to expand...

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
Click to expand...

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
Click to expand...

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them
is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory
back

to the \sysvol\domain\policies folder?

Steve
Click to expand...
Click to expand...
Click to expand...
 
I was able to restore the directory from an old backup. I then placed it
back in the policies folder and it was replicated to all servers. I then
just had to fix up the GPT.ini file and it worked. Thanks!

Steve

Denis Wong @ Hong Kong said:
Hi Steve,

Yes.

View, print, and save a report of Group Policy object settings
http://www.microsoft.com/technet/pr...elp/7e1bdb8f-f973-4a02-9b1c-b02331c7ccc7.mspx

br,
Denis

Stephen Stormont said:
So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol
tool
http://support.microsoft.com/?kbid=830062

br,
Denis


I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access


\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access


\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access


\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of
them

is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory

back

to the \sysvol\domain\policies folder?

Steve
Click to expand...
Click to expand...
Click to expand...
 
Back
Top