Re: Re: Account Policies do not appear to apply

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi,

I actually had to restore all my SYSVOL when a drive got corrupted and
then replicated. I lost all my SYSVOL GUID Policy Folders. Basically
what I did was got a copy of the actual GUID folders from another
Domain and put it back into my SYSVOL. The trick was creating the name
in Group Policy to match the GUID and then going through the Local
Security Policies - User Rights Assignment in the Domain Controllers
to make sure the accounts were correct.

Have you checked to see if the GUID folders still exist?

I found this info on the tool.
>For general backup and restore of the Default Domain Policy and
>Default Domain Controller Policy, and also for other GPOs, Microsoft
>recommends that you use the Group Policy Management Console (GPMC) to
>create regular backups of these GPOs. You can then use GPMC in
>conjunction with these backups to restore the exact security settings
>that are contained in these GPOs.
>
>For more information about the GPMC, visit the following Microsoft
Web
>site:
>http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
>
>"If you are in a disaster recovery scenario and you do not have any
>backed up versions of the Default Domain Policy or the Default Domain
>Controller Policy, you may consider using the Dcgpofix tool. If you
>use the Dcgpofix tool, Microsoft recommends that as soon as you run
>it, you review the security settings in these GPOs and manually
adjust
>the security settings to suit your requirements." A fix is not
>scheduled to be released because Microsoft recommends you use GPMC to
>back up and restore all GPOs in your environment. The Dcgpofix tool
is
>a disaster-recovery tool that will restore your environment to a
>functional state only. It is best not to use it as a replacement for
a
>backup strategy using GPMC. It is best to use the Dcgpofix tool only
>when a GPO back up for the Default Domain Policy and Default Domain
>Controller Policy does not exist.


--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-Account-Policies-apply-ftopict366533.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1188955
.



Relevant Pages

  • Re: Userenv Event 1030 Problem - cannot edit GPO
    ... we need to apply predefined Security Template on SBS 2003 ... Open the Default Domain Controllers Policy. ... are able to restore the domain to the current states in case of unexpected ... default Group Policy object: Software Installation, ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Policy Is not opening.
    ... Actually we dont wanna do Authrotative Restore. ... Actually we dint find that policy in the Domain Controllers ... >> Report. ...
    (microsoft.public.win2000.security)
  • RE: Default GPO?
    ... DCGPOFIX.EXE will restore the Default Domain Policy ... Restore Default Group Policy Objects ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Locked Out of Server
    ... and the local security policy was damaged. ... - Restore the System registry file to a different location. ... Boot the server with a Bart PE boot CD. ...
    (microsoft.public.win2000.networking)
  • Re: At this point, Im wondering if GPOs even work?
    ... what is set in a policy does not bubble up into the user interface. ... Pop-up Blocker" box on one and checked it on the other. ... ensured no GPOs nor local policy were superseding my Test GPO ... Config (so why do these settings even exist in Computer Config if they ...
    (microsoft.public.windows.group_policy)