Delete an missing group policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My windows 2000 server had a default domain group policy that somehow was
deleted or removed in some manner. The group policy links show the policy as
existing but the file doesn't. When I try to edit it, I of course get an
error because it doesn't exist.

I am preparing to add a new server (2003) to my domain that consists of two
2000 DC's. In order to properly do this, I discovered that I have this
lingering policy. When I run gpotool.exe, I get the following results:

============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\CSR01\sysvol\colortone.com\policies\{6AC1786C-016F-11D2-945F-00C04FB984F9},
error 2
Friendly name: Default Domain Controllers Policy
Details:
------------------------------------------------------------
DC: CSR01
Friendly name: Default Domain Controllers Policy
Created: 7/26/2002 11:47:41 AM
Changed: 3/9/2006 4:08:50 PM
DS version: 0(user) 78(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================

First, do I need to worry about this? And, if so, how do I fix it. I have
added a new default domain policy. I have unlinked the bad one. I can't
unlink and remove because it won't let me.

Thanks.
 
yes there will be problems. actually, what you are missing is not
Default Domain Policy but Default Domain Controller Policy. If you have
other DCs that are still good, you can try to copy the mentioned folder
over. You also have couple of other options:
1. using dcgpofix http://support.microsoft.com/kb/833783/en-us
2. modify burflags on the DC in question to perform a un-authoritative
FRS restore

Keep in mind that don't manually modify files under sysvol folder and
don't let your antivirus touch sysvol contents
 
Thanks. I figured as much. Its never easy. I inherited this problem
(amoung many :-))

So, I know dcgpofix is available on windows 2003. But, is it available in
2000? If not (assumed), can I run it from my windows 2003 server (just
installed and waiting to be a DC .... not in the forest yet though)? If
not, how do I overcome this issue?

Thanks!
 
I think I just found a fix using the Recreatedefpol tool provided for windows
2000. It looks to be the same as the dcgpofix tool for 2003. Its found in
article ID 830062. Do you agree?
 
sorry i wasn't available to visit back this thread.

no you cannot use dcgpofix on windows 2000.
 
Back
Top