RE: Group Police problem i need help

Hi Roma,

Thanks for posting here.

From your post, my understanding on this issue is: you cannot open Domain
Security Policy and Domain Controller Security Policy. If I am off base,
please feel free to let me know.

Based on your description and my knowledge, please let me know whether you
get the "Windows cannot open template file" error message when you open
Domain Security Policy. If so, it's seems the Default Domain Controller
Policy is corrupted. In Windows 2003, DCGPOFIX can by use to reset the
Default Domain Controller Policy as well as the Default Domain Policy.
However, you need to reconfigure the two policies after resetting them. For
details regarding the DCGPOFIX command-line switch, type DCGPOFIX /?.

NOTE: Please backup the two policies before reset them! For details, please
refer to the following MS KB article:

833783 The Dcgpofix tool does not restore security settings in the Default
http://support.microsoft.com/?id=833783

HINT: For general backup and restore of the Default Domain Policy and
Default Domain Controller Policy, and also for other GPOs, Microsoft
recommends that you use the Group Policy Management Console (GPMC) to
create regular backups of these GPOs. You can then use GPMC in conjunction
with these backups to restore the exact security settings that are
contained in these GPOs.

For more information about the GPMC, visit the following Microsoft Web site:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

Hope the information above is helpful!

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================







.

Relevant Pages

  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: logon from the server machine !
    ... >The default Domain Controller policy in Windows Server ... >Security Policy setting. ... Allow Local Logon ...
    (microsoft.public.windows.server.general)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.setup_deployment)