General discussion
November 14, 2001 at 04:50 AM
christopher hill

Domain Security Policy link broken

by christopher hill . Updated 24 years, 8 months ago

I’ve got a Windows 2000 native mode domain set up, with the Network Administration tools installed. However, when I try to run either the ‘Domain Security Policy’ or ‘Domain Controller Security Policy’ links, the MMC loads but then I get an error: ‘The dn syntax is invalid’.

I’ve no idea why this should happen – the only thing I can think of is that I did rename the two default group policies at one time (Default Domain Policy and Default Domain Controller Policy).

I’ve looked around a bit, and when I loaded the broken shortcuts into Notepad I noticed that they give a command line option that looks something like this:

/gpobject:”LDAP://CN=,CN=Policies,CN=System,???”

Now, the ??? is the big problem. If I load the MMC templates with the above command line option I get the error I mentioned before. If I replace the ??? with:

DC=crgs,DC=local

which is what I would expect it to be for LDAP access, then it works fine. So what’s up with the ???s? Any ideas? How can I fix this? I don’t really want to create new shortcuts, I’d like the ones that are created by default to work properly!

BTW if someone could tell me if their copy of the shortcut has the ??? as well it would be appreciated. Just load Notepad and drag the shortcut into it, you’ll be able to see the command line option quite clearly.

Thanks!

This discussion is locked

All Comments