Re: SBS DCOM

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Smyth,

It's very nice to hear you again.

From your Userenv.log and description, I suggest you refer to the following
steps to reset the group policy objects to default, you can do as follows:

1. By default, there are only 9 default group policies on the SBS server.
That is:

- Small Business Server Auditing Policy
- Default Domain Controllers Policy
- Small Business Server Remote Assistance Policy
- Small Business Server Lockout Policy
- Small Business Server Domain Password Policy
- Small Business Server Client Computer
- Default Domain Policy
- Small Business Server Update Services Server Computers Policy
- Small Business Server Update Services Common Settings Policy

For general backup and restore of the Default Domain Policy and Default
Domain Controller Policy, and also for other GPOs, Microsoft recommends
that you use the Group Policy Management Console (GPMC) to create regular
backups of these GPOs. You can then use GPMC in conjunction with these
backups to restore the exact security settings that are contained in these
GPOs.

2. Do you have GPOs backups when the SBS server was installed? If yes, you
can easily restore them to defaults. If not, you can use the GPMC.MSC
console on a fresh installed SBS Server, export all the GPO settings and
import it to yours. You can do refer to the steps outlined in the following
article:

Backing up, Restoring, Migrating, and Copying GPOs
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKi
t/937d5838-f720-4c0b-a65c-e8ed2658a414.mspx

For more information about the GPMC, visit the following Microsoft Web site:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

Administering Group Policy with the GPMC
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx

3. If you have not fresh installed server, we can use the DCGPOFIX.exe to
reset the Default Domain Policy or the Default Domain Controller Policy, or
both policies.

DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain
Controller Policy to original default settings. Note that it does not
affect other GPOs.

In SBS most of the custom GPO settings are done outside of these policies.
We create custom GPOs to configure the settings for firewall, folder
redirection and etc. These GPOs will be left intact if you run dcgpofix.exe.

So if you want to reset the Default Domain Policy or the Default Domain
Controller Policy, you can refer to the following steps:

1). Backup all group policy settings by Group Policy Management console.
You can do as follows:

Run "gpmc.msc" (no quotation marks) to launch the Group Policy Management
console.

Navigate to Domains -> servername -> Group policy Objects. Right click it
to choose backup All item to backup all group policies configured in your
domain. So that you can recover back settings you need.

Backing up, Restoring, Migrating, and Copying GPOs
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKi
t/937d5838-f720-4c0b-a65c-e8ed2658a414.mspx

2). Delete the customized group policies that are not default group
policies in SBS 2003.

3). Run DCGPOFIX to reset Default Domain Policy and Default Domain
Controller Policy to original default settings. For details regarding the
DCGPOFIX command-line switch, type DCGPOFIX /?.

4). Run command ''gpupdate /force'' (no quotation marks) on the SBS server
box and all client workstations to force the policy refresh. Then please
test to see if the default group policies are back.

More information is addressed in the following article:

833783 The Dcgpofix tool does not restore security settings in the Default
Domain Controller Policy to their original state
http://support.microsoft.com/?id=833783

324800 How To Reset User Rights in the Default Domain Group Policy in
Windows Server 2003
http://support.microsoft.com/?id=324800

Related information:

Introducing the Group Policy Management Console
http://www.microsoft.com/windowsserver2003/gpmc/gpmcintro.mspx

Administering Group Policy with the GPMC
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx

Backing Up and Restoring Windows Small Business Server 2003
http://download.microsoft.com/download/b/d/8/bd8e1a40-d202-429a-8eb7-26300d6
2bcc9/BKU_BkupRstr.doc

Hope above information helps. I am happy to be of assistance to you and
look forward to you reply.

Have a nice day.

Best Regards,

Steven Zhu
MCSE/MCDBA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
For urgent issues, you may want to contact Microsoft CSS directly.
Please check http://support.microsoft.com for regional support phone
numbers.
Any input or comments in this thread are highly appreciated.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================


.

Relevant Pages