"Default Domain Controllers Policy" is gone. Help!!

S

Steve Stormont

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them is
"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory back
to the \sysvol\domain\policies folder?

Steve
 
D

Denis Wong @ Hong Kong

Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

Steve Stormont said:
I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access
\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them is
"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory back
to the \sysvol\domain\policies folder?

Steve
 
S

Stephen Stormont

So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access

\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them
is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory
back

to the \sysvol\domain\policies folder?

Steve
 
D

Denis Wong @ Hong Kong

Hi Steve,

Yes.

View, print, and save a report of Group Policy object settings
http://www.microsoft.com/technet/pr...elp/7e1bdb8f-f973-4a02-9b1c-b02331c7ccc7.mspx

br,
Denis

Stephen Stormont said:
So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol tool
http://support.microsoft.com/?kbid=830062

br,
Denis

I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access

\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Error: Cannot access

\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D
2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:

[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B
}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of them
is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory
back

to the \sysvol\domain\policies folder?

Steve
 
S

Steve Stormont

I was able to restore the directory from an old backup. I then placed it
back in the policies folder and it was replicated to all servers. I then
just had to fix up the GPT.ini file and it worked. Thanks!

Steve

Denis Wong @ Hong Kong said:
Hi Steve,

Yes.

View, print, and save a report of Group Policy object settings
http://www.microsoft.com/technet/pr...elp/7e1bdb8f-f973-4a02-9b1c-b02331c7ccc7.mspx

br,
Denis

Stephen Stormont said:
So I could run the Group Policy Management Console and "Save A Report"
of the current Default Domain policy before I run redreatedefpol. Then
after I run it, I could just open the report and change whatever
settings were listed back to their original settings, right?

Steve
Hi Steve,

If your DDCP is missing, you can try to use the Recreatedefpol tool in the
following KB Method 2 to reset your policy.

Method 2: Reset the default domain policies with the Recreatedefpol
tool
http://support.microsoft.com/?kbid=830062

br,
Denis


I think I finally found out why the new password settings that I
mentioned in my other posts weren't being applied; the "Default Domain
Controllers Policy" appears to be gone. Here's the background; we have a
native mode Windows 2000 Active Directory domain with 3 controllers. I
changed the password policy in the "Default Domain Policy" and the changes
were replicated to each server, but they were never replicated to the
clients.

I ran gpotool and got this:

Validating DCs...
Available DCs:
server1.omni.imsweb.com
server2.omni.imsweb.com
server3.omni.imsweb.com
Searching for policies...
Found 6 policies
============================================================
Policy {10558B3E-7826-40AD-B349-5FB1C214AEF3}
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Policy OK
============================================================
Policy {5B6213A6-0CA2-4429-9249-E7D987895A20}
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access


\\server1.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access


\\server2.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Error: Cannot access


\\server3.omni.imsweb.com\sysvol\omni.imsweb.com\policies\{6AC1786C-016F-11D

2-945F-00C04FB984F9}, error 2
Details:
------------------------------------------------------------
DC: Server1.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:23:31 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server2.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:24:01 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: server3.omni.imsweb.com
Friendly name: Default Domain Controllers Policy
Created: 1/17/2002 8:58:44 PM
Changed: 11/3/2004 8:22:04 PM
DS version: 0(user) 60(machine)
Sysvol version: not found
Flags: 0
User extensions: not found
Machine extensions:


[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B

}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {E1818BB3-FB30-4DAE-A1B2-9E8CFF9C7B7E}
Policy OK
============================================================
Policy {F3A737F3-30FD-4D53-8D27-C081923BA823}
Policy OK

Errors found

I installed the Group Policy Mangement Console on a Windows XP
Professional machine attached to the domain. I drilled down to domains ->
omni.imsweb.com -> Group Policy Objects and I see 7 objects, one of
them

is

"Default Domain Controllers Policy". When I click on that a message comes
up saying "The system cannot find the file specified.".

Browsing to \sysvol\domain\policies on any of the controllers does not
show a {6AC1786C-016F-11D2-945F-00C04FB984F9} directory.

So, how do I fix this? Find a system state backup from before 11/3/04
and then restore the entire state, or can I just restore that directory

back

to the \sysvol\domain\policies folder?

Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top