GPRESULT Shows 2 of the same policies

[Dan]

I did a gpresult and found out that the machine side has 2 Default Domain
Policies being applied and 2 Default Domain Controller Policies. Is this
correct? Shouldn't there just be one of each? I want to eliminate the
Default Domain Policy and use one that I created. Is there a way to do
that?

 

[Tim Springston \(MSFT\)]

Hi Dan-

You should only have those processed once each, depending on what
machine/user we are discussing.

It is possible that the default policies are linked twice to the domain and
domain controllers OU. You can find out by looking at the properties of
those GPOs in DSA.MSC (Active Directory Users and Computers). So,
right-click on the OU and choose PRoperties, then click on the Group Policy
folder tab so that it is in front. Then select the policy and click the
Properties button.

There will be a GUID for the GPOs there.

The Default Domain Policy GUID will always be:
{31B2F340-016D-11D2-945F-00C04FB984F9}

The Default Domain Controllers Policy GUID will always be:
{6AC1786C-016F-11D2-945F-00C04fB984F9}

Please repost to let us know what you find.