Default Domain Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Windows 2000 domain
When I go into Users and Groups and I go to the default domain group policy
and try to open it up, I get error after error stating it has to concatnate
items because of security. I think this happened because I promoted a Win2003
server as a domain controller and then demoted, but I'm not positive about
that.
I was wanting to know if there is a way to delete the current default policy
and put a clean one in its place, or if there is some other fix to this
problem.
Any help is appreciated.
 
KJacks said:
Windows 2000 domain
When I go into Users and Groups and I go to the default domain group
policy
and try to open it up, I get error after error stating it has to
concatnate
items because of security. I think this happened because I promoted a
Win2003
server as a domain controller and then demoted, but I'm not positive about
that.
I was wanting to know if there is a way to delete the current default
policy
and put a clean one in its place, or if there is some other fix to this
problem.
Any help is appreciated.
Click to expand...

DCFixGpo.exe will put Both of the default policies
(Domain and Domain Controller Defaults) back to the
original state.

I don't know if it will fix you current access. I would
run this from a Win2003 DC if the domain has been
upgraded but I don't have specific knowledge that this
is necessary.
 
I went to run this on the DC, but I couldn't find the executable and it
wouldn't run from the run or command prompt. Any help with this?

Herb Martin said:
KJacks said:
Windows 2000 domain
When I go into Users and Groups and I go to the default domain group
policy
and try to open it up, I get error after error stating it has to
concatnate
items because of security. I think this happened because I promoted a
Win2003
server as a domain controller and then demoted, but I'm not positive about
that.
I was wanting to know if there is a way to delete the current default
policy
and put a clean one in its place, or if there is some other fix to this
problem.
Any help is appreciated.
Click to expand...

DCFixGpo.exe will put Both of the default policies
(Domain and Domain Controller Defaults) back to the
original state.

I don't know if it will fix you current access. I would
run this from a Win2003 DC if the domain has been
upgraded but I don't have specific knowledge that this
is necessary.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
 
It is happening on my primary domain controller (Win2000Server) and other
servers. Should I install the patch on all of them, or do you think that
means it is something else?
Thanks for the help.

Edog said:
Is the error message, "The following entry in [strings] is too long and has
been truncated..." If so see http://support.microsoft.com/?id=842933

KJacks said:
Windows 2000 domain
When I go into Users and Groups and I go to the default domain group policy
and try to open it up, I get error after error stating it has to concatnate
items because of security. I think this happened because I promoted a Win2003
server as a domain controller and then demoted, but I'm not positive about
that.
I was wanting to know if there is a way to delete the current default policy
and put a clean one in its place, or if there is some other fix to this
problem.
Any help is appreciated.
Click to expand...
Click to expand...
 
Any 2000 server that is accessing XP based group policy objects will need to
have this update applied.
 
Gotcha. Thanks so much. I just installed it on the PDC and it worked. You are
the man. I sure do appreciate it.
Can I ask you one more thing? I've got several newer 2003 Servers and I was
wondering if I should upgrade my domain from 2000 to 2003. Would you
recommend that, or should I do more reading up and prepare for it, and if so
any recommendations?

Thanks for all your help!
 
Try searching the MS website, or looking on the ResKit tools.

Mine is in my Windows (2003) System32 directory.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

KJacks said:
I went to run this on the DC, but I couldn't find the executable and it
wouldn't run from the run or command prompt. Any help with this?

Herb Martin said:
KJacks said:
Windows 2000 domain
When I go into Users and Groups and I go to the default domain group
policy
and try to open it up, I get error after error stating it has to
concatnate
items because of security. I think this happened because I promoted a
Win2003
server as a domain controller and then demoted, but I'm not positive
about
that.
I was wanting to know if there is a way to delete the current default
policy
and put a clean one in its place, or if there is some other fix to this
problem.
Any help is appreciated.
Click to expand...

DCFixGpo.exe will put Both of the default policies
(Domain and Domain Controller Defaults) back to the
original state.

I don't know if it will fix you current access. I would
run this from a Win2003 DC if the domain has been
upgraded but I don't have specific knowledge that this
is necessary.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
Click to expand...
 
That is a little bit of a loaded question. While I sit on the fence about
things like this, typically if "it ai'nt broke don't fix it" comes to mind.
On the other hand, there are some great features that are only available via
a 2003 domain. Contact me off list of you want some more feedback.
erichagstrom at gmail dot com.
 
KJacks said:
Gotcha. Thanks so much. I just installed it on the PDC and it worked. You
are
the man. I sure do appreciate it.
Can I ask you one more thing? I've got several newer 2003 Servers and I
was
wondering if I should upgrade my domain from 2000 to 2003. Would you
recommend that, or should I do more reading up and prepare for it, and if
so
any recommendations?
Click to expand...

Generally I would recommend Win2003 domains --
especially if you already paid for the Win2003 Server
licenses.

More features, probably fewer bugs.
 
Back
Top