General discussion

Locked

How do you restore a default dc policy?

By rainnie1 ·
I am having problems with the security settings in the dafault domain controllers policy. When I access the security settings node, a message stating "Windows Cannot Open Template" is displayed on the right half of the Group Policy window. Should I restore the basicdc and securedc templates from my Windows 2000 disk? I have appplied both. Is there a way to get back to a clean policy? Deleting the policy from the Group Policy properties screen does not seem to work.

My problem is that the current group policy settings have deleted users in them which cause errors when i apply the settings.

Thanks

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

How do you restore a default dc policy?

by wmjchsrm14 In reply to How do you restore a defa ...

we must need to restore so that it will properly
work.find and or download the necessary backup
programs.take a note on settings.verify also if it is still in recycle bin.

Collapse -

How do you restore a default dc policy?

by rainnie1 In reply to How do you restore a defa ...

Was looking for a little more detail. It's been a long standing problem and I don't have a backup of the policy in a workable state. I guess I will try to create a new policy with the same settings and see how that works. Either that or modify the local security settings.

Mike

Collapse -

How do you restore a default dc policy?

by Mihai.P In reply to How do you restore a defa ...

i've seen some time ago an article about how to restore th policy (after a hack) but i haven't try it. you can replace directly in sysvol the default domain policy or default domain controller policy (for exemple the default domain policy is: {6AC1786C-016F-11D2-945F-00C04fB984F9})
good luck

Collapse -

How do you restore a default dc policy?

by rainnie1 In reply to How do you restore a defa ...

your answer got me on the right track. I copied the system.smb (or something like that) to the domain controller policy directory and rebuilt the template as described in the type you mentioned.

Collapse -

How do you restore a default dc policy?

by Mihai.P In reply to How do you restore a defa ...

or check this one (on exemple)
http://www.jsiinc.com/SUBF/TIP2900/rh2949.htm

Collapse -

How do you restore a default dc policy?

by rainnie1 In reply to How do you restore a defa ...

Poster rated this answer

Collapse -

How do you restore a default dc policy?

by TSNorth In reply to How do you restore a defa ...

I think your problem is the policy is being applied to you the logged in user. You have restricted yourself from accessing the template.
A couple of things to check,
Is the policy being applied to you as you log in?
Are the NTFS permissions on the sysvol folder preventing you from accessing the template files?

Collapse -

How do you restore a default dc policy?

by rainnie1 In reply to How do you restore a defa ...

Poster rated this answer

Collapse -

How do you restore a default dc policy?

by mjost In reply to How do you restore a defa ...

Two things that you can try:

1)The security database is corrupted.

Cause: Improperly shutting down the computer or a software error.

Solution: At a command prompt, run esentutl /g to check the integrity of the security database at %windir%\Security\Database\Secedit.sdb.

If the database is corrupt:

Attempt to recover it by typing esentutl /r at a command prompt on the %windir%\Security folder. If this fails, attempt to repair it by typing esentutl /p at a command prompt on %windir%\Security\Database\Secedit.sdb.
After that, delete the log files in %windir%\Security.

2)Reapply the Setup security.inf to restore all default settings.
Do not apply the Setup security.inf template through Group Policy. The Setup security.inf template should only be applied to the local computer through Secedit or Security Configuration and Analysis. It is preferable to apply it in parts using the Secedit command-line tool.

Collapse -

How do you restore a default dc policy?

by rainnie1 In reply to How do you restore a defa ...

Thanks for the info.

Back to Windows Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums