Default Domain Policy not applying computer settings

[Guest]

Hi all,

Is it normal for a default domain policy to have the computers section
disabled? If it is disabled should other policies still apply computer
setting? The default domain policy has been modified to death by previous
admins. If I reset the default domain policy back to default and there are
lots of problems, can I restore the current one and bring the system back to
the way it was before resetting it? I have all of the policies backed up
through the GPMC.

The problem that I am having is that settings for event logs are not
applying even though I made a policy to set them.

The policy results wizard shows the default domain policy to be the winning
policy even though the computer part is disabled and I have a different
policy just for the event logs.

User settings are working like they are supposed to.

Any ideas advice or help is much appreciated..

Mike

 

[Jorge_de_Almeida_Pinto]

Hi all,

Is it normal for a default domain policy to have the
computers section
disabled? If it is disabled should other policies still apply
computer
setting? The default domain policy has been modified to death
by previous
admins. If I reset the default domain policy back to default
and there are
lots of problems, can I restore the current one and bring the
system back to
the way it was before resetting it? I have all of the policies
backed up
through the GPMC.

The problem that I am having is that settings for event logs
are not
applying even though I made a policy to set them.

The policy results wizard shows the default domain policy to
be the winning
policy even though the computer part is disabled and I have a
different
policy just for the event logs.

User settings are working like they are supposed to.

Any ideas advice or help is much appreciated..

Mike

If the computer part is disabled its settings will not get applied. I
wonder why someone wuild disable the default domain policy.
With the GPMC you can backup and restore GPOs. Don’t forget if you
restore a GPO it still needs to get replicated to the other DC.

To reset the Default Domain GPO and/or the Default Domain Controllers
GPO tooling is available for windows 2000 and windows 2003.

For Windows 2000 see:
http://www.microsoft.com/downloads/...ae-b7dd-4bb5-ab2a-976d6873129d&displaylang=en

For Windows 2003 you could do:
(http://www.microsoft.com/technet/pr...ons/b9db0ae7-3d25-4e5e-9320-e5db0b0c9f8a.mspx)
(http://support.microsoft.com/default.aspx?kbid=833783)
To reset the Domain GPO, type dcgpofix /targetomain
To reset the Default DC GPO, type dcgpofix /targetC
To reset both the Domain and Default DC GPOs, type dcgpofix
/target:both