Re: Unable to promote a new server
- From: v-adapan@xxxxxxxxxxxxxxxxxxxx ("Ada Pan [MSFT]")
- Date: Thu, 12 Oct 2006 14:20:19 GMT
Hello Joseph,
We usually utilize Windows Server 2003 Default Group Policy Restore Utility
(Dcgpofix.exe) to re-create the default Group Policy objects or manually
revert the settings directly. Between the solutions, revert the settings
back is recommended.
NOTE: If you are using GPMC, it is recommended that you use GPMC to restore
all GPOs in your environment. The Dcgpofix tool is a disaster-recovery tool
that will restore your environment to a functional state only. It is best
not to use it as a replacement for a backup strategy using GPMC. It is best
to use the Dcgpofix tool only when a GPO back up for the Default Domain
Policy and Default Domain Controller Policy does not exist.
If you use the Dcgpofix tool, Microsoft recommends that as soon as you run
it, you review the security settings in these GPOs and manually adjust the
security settings to suit your requirements.
For detailed instructions on how to use the Dcgpofix tool, please refer to
the following MS article:
Default Group Policy objects become corrupted: disaster recovery
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera
tions/b9db0ae7-3d25-4e5e-9320-e5db0b0c9f8a.mspx
More Information:
=======
833783 The Dcgpofix tool does not restore security settings in the Default
http://support.microsoft.com/?id=833783
Q267553 How to Reset User Rights in the Default Domain Controllers GPO
http://support.microsoft.com/support/kb/articles/Q267/5/53.ASP
Hope this helps!
Regards,
Ada Pan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
.
- Follow-Ups:
- Re: Unable to promote a new server
- From: "Ada Pan [MSFT]"
- Re: Unable to promote a new server
- References:
- RE: Unable to promote a new server
- From: Quo Vadis
- RE: Unable to promote a new server
- From: Ada Pan [MSFT]
- RE: Unable to promote a new server
- From: Quo Vadis
- RE: Unable to promote a new server
- From: Ada Pan [MSFT]
- Re: Unable to promote a new server
- From: Ada Pan [MSFT]
- Re: Unable to promote a new server
- From: Vincent Xu [MSFT]
- Re: Unable to promote a new server
- From: Quo Vadis
- Re: Unable to promote a new server
- From: "Ada Pan [MSFT]"
- Re: Unable to promote a new server
- From: "Ada Pan [MSFT]"
- RE: Unable to promote a new server
- Prev by Date: Re: looking for a public AD server
- Next by Date: Re: Reset all user account passwords in active directory
- Previous by thread: Re: Unable to promote a new server
- Next by thread: Re: Unable to promote a new server
- Index(es):
Relevant Pages
|