Domain controller lost all security settings

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I have a windows 2000 AS configured as domain controller. Suddenly, all
users (including domain/users) have unrestricted rights to the domain
controller. They can all access \\server\c$ drive with full rights, they
can all connect with their usernames/passwords to terminal server on this
domain, they can even change system time.
Nobody in our organization has played with group policy or domain controller
security policy before this happened. Now when I try to open either Domain
Controller Security policy or domain security policy i recieve an error
saying: " Failed to open the group policy object. You may not have the
appropriate rights. System cannot find the path specified." I am logged on
as an administrator when I get this error.

Does anybody have any suggestions as to how to fix the problem?
I have download RecreateDefPol.exe from microsoft and I will try to use it
tomorrow morning. Do you think this might solve the problem?

Thanks.



.

Relevant Pages

  • Re: remote desktop rights on domain controller
    ... First of for domain controllers user rights must be configured in Domain ... Controller Security Policy - not local policy. ... The user right for logon ... Group on the domain controller if using Windows 2003. ...
    (microsoft.public.windows.server.security)
  • Re: Users cannot change passwords
    ... Security Policy [or possibly local on a domain controller] the security ... change password permissions to the user object in Active Directory. ... I have looked for a group policy, ...
    (microsoft.public.win2000.group_policy)
  • Re: Problems since SP1 (Server 2003) - 2nd request for help
    ... You are doing the correct thing by changing the setting in the Domain Controller Security policy, but the changes are not taking effect. ... On the Group Policy tab, is there a check in the No Override column? ... You can check if it is Disabled by opening up Active Directory Users & Computers, right-click on the "Domain Controllers" OU and choose Properties. ...
    (microsoft.public.windows.terminal_services)
  • Re: Problems since SP1 (Server 2003) - 2nd request for help
    ... Services in the Domain Security Policy? ... Administrators and Remote Desktop Users - I removed then did GPupdate /force ... Group Policy tab, is there a check in the Disabled column? ... Check if the Domain Controller Security Policy has been ...
    (microsoft.public.windows.terminal_services)
  • Re: GPOs
    ... Domain Controller Security policy snap-in is just group policy object editor ... mapped to Domain Controllers default policy security extension. ...
    (microsoft.public.win2000.active_directory)