Re: Recovering from Bad Group Policy Update

DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain
Controller Policy to original default settings. Note that it does not
affect other GPOs.


"Will" <westes-usc@xxxxxxxxxxxxxx> wrote in message
news:2c2dnSQbA-hqVybYnZ2dnUVZ_riknZ2d@xxxxxxxxxxxxxxx
In a test lab, we have a domain controller security policy that was set
for
the first time and obviously went very badly. The machine is seriously
screwed up on reboot. What is the recommended procedure for recovery
to
some baseline where you can then start over?

--
Will




.

Relevant Pages

  • Re: Recovering from Bad Group Policy Update
    ... Controller Policy to original default settings. ... affect other GPOs. ... Yes, sort of, but one should be aware of the info in ...
    (microsoft.public.windows.group_policy)
  • Reset to Defaults?
    ... Is there a way to reset the default domain policy and default domain ... controller policy to out of the box settings? ...
    (microsoft.public.windows.group_policy)
  • Re: Help with GPO
    ... Last time Group Policy was applied: Wednesday, May 16, 2007 at 12:19:33 PM ... Default Domain Policy ... The user received "Internet Explorer Branding" settings from these GPOs: ...
    (microsoft.public.windows.group_policy)
  • Re: Aftermath of RDIRCMP.EXE?
    ... Why not just make the Default Domain Policy back to default, which wiill eliminate any possibility that anything you change in there will affect the domain adversely. ... Then create the OU, and as Jorge suggested, link the GPO you previously created, or if you haven't created one, create one with the necessary settings. ... Also, just an FYI, there was another thread recently posted with a similar question, including an OU/GPO design question. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Security policy
    ... It's suggested and recommended to not change the Default Domain Policy. ... I would suggest to design your OU structure to reflect your organizaiton and/or departments, which will also help you create GPOs for the OU design. ... I separated Laptops and Desktops because I have two different Windows Update GPOs set. ...
    (microsoft.public.windows.server.active_directory)