Re: GPO Reinstall



I tried this to no avail. Same error. I have no certificates...Any other
suggestions?

"Harj" <cisqokid@xxxxxxxxx> wrote in message
news:1177952276.681320.220960@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Apr 28, 1:31 pm, "Andre Monostori" <tech...@xxxxxxxxxxxxxx> wrote:
I have tried dcgpofix.exe and I get the following error:

Unable to read EFS certificates from Registry.pol file of Default Domain
Policy....

I keep getting 1030 & 1058 errors in logs. I can not even view the
GPOs.
This is a win 2003 server. Problems started after upgrade from win 2K
server to win2003 server.

Any suggestions to zap this and start over with the GPO?

Hi,

When you say server, do you mean Domain controllers:
Do you have Certificates in your environment?
Did you recreate both of the policies with dcgpofix? (domain and
domain controllers)
I would do one of two things here. Verify your DNS settings, point
the DC's to the PDC in the network and flush, register dns and stop
and start the netlogon service.
If this does not fix this, go into the sysvol under the default domain
policy (the one with the GUID starting with 31B2F340) and delete the
registry.pol file.
Go into the default domain policy and make a settings change. This
will recreate the registry.pol file

Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com



.



Relevant Pages

  • Re: GPO Reinstall
    ... Unable to read EFS certificates from Registry.pol file of Default Domain ... This is a win 2003 server. ... Verify your DNS settings, point ... Go into the default domain policy and make a settings change. ...
    (microsoft.public.windows.group_policy)
  • GPO Reinstall
    ... Unable to read EFS certificates from Registry.pol file of Default Domain ... I can not even view the GPOs. ... This is a win 2003 server. ... Any suggestions to zap this and start over with the GPO? ...
    (microsoft.public.windows.group_policy)
  • GPO Reinstall
    ... Unable to read EFS certificates from Registry.pol file of Default Domain ... I can not even view the GPOs. ... This is a win 2003 server. ... Any suggestions to zap this and start over with the GPO? ...
    (microsoft.public.windows.server.general)

Loading