Domain Controller Security Policy

  • Thread starter Thread starter peter
  • Start date Start date
P

peter

Hi,

I have an Windows 2000 SBS server as a domain controller with another
Windows 2000 Server as an additional domain controller.

All of the default settings such as "Password" Policies were present inthe
"Domain Controller Security Policy" , until one day all of the settings were
gone and became "undefined".

The "Domain Security Policy" only showed "IP Security Policies on Active
Directory" and "Public Key Policies".

Does anyone know how I can get back the default settings or what happened
with the default settings?

Thanks.

Peter
 
Password policies are defined in Domain Policy and they have no efect in
domain Controllers Policy. I don't quite understand, what you mean by gone.
Are you missing all folders with policy settings or the policies are jus
undefined ? To get policies back, you would have to restore your server
system state.
 
Well, in the Domain Controller Security Policy, the items such as items for
the password policy are all undefined.

In the Domain Security Policy, the folders are missing.

Thanks.

Peter
 
Undefined in Domain Controllers Security Policy is ok, as I said, that this
is set at Domain Security Policy. It is strange, that you are missing this
folders. To restore your Domain policy, there are two options:

1. From backup
2. Call Microsoft PSS and request a tool recreateDefPol.exe, which recreates
default security policy for Domain Policy and domain Controllers Policy.

--

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)
 
Microsoft Product support Services. You can find their phone number on
support.microsoft.com

Regards

--

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)
 
Back
Top