Delete an missing group policy

G

Guest

My windows 2000 server had a default domain group policy that somehow was
deleted or removed in some manner. The group policy links show the policy as
existing but the file doesn't. When I try to edit it, I of course get an
error because it doesn't exist.

I am preparing to add a new server (2003) to my domain that consists of two
2000 DC's. In order to properly do this, I discovered that I have this
lingering policy. When I run gpotool.exe, I get the following results:

============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\CSR01\sysvol\colortone.com\policies\{6AC1786C-016F-11D2-945F-00C04FB984F9},
error 2
Friendly name: Default Domain Controllers Policy
Details:
------------------------------------------------------------
DC: CSR01
Friendly name: Default Domain Controllers Policy
Created: 7/26/2002 11:47:41 AM
Changed: 3/9/2006 4:08:50 PM
DS version: 0(user) 78(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================

First, do I need to worry about this? And, if so, how do I fix it. I have
added a new default domain policy. I have unlinked the bad one. I can't
unlink and remove because it won't let me.

Thanks.
 
S

strongline

yes there will be problems. actually, what you are missing is not
Default Domain Policy but Default Domain Controller Policy. If you have
other DCs that are still good, you can try to copy the mentioned folder
over. You also have couple of other options:
1. using dcgpofix http://support.microsoft.com/kb/833783/en-us
2. modify burflags on the DC in question to perform a un-authoritative
FRS restore

Keep in mind that don't manually modify files under sysvol folder and
don't let your antivirus touch sysvol contents
 
G

Guest

Thanks. I figured as much. Its never easy. I inherited this problem
(amoung many :))

So, I know dcgpofix is available on windows 2003. But, is it available in
2000? If not (assumed), can I run it from my windows 2003 server (just
installed and waiting to be a DC .... not in the forest yet though)? If
not, how do I overcome this issue?

Thanks!
 
G

Guest

I think I just found a fix using the Recreatedefpol tool provided for windows
2000. It looks to be the same as the dcgpofix tool for 2003. Its found in
article ID 830062. Do you agree?
 
S

strongline

sorry i wasn't available to visit back this thread.

no you cannot use dcgpofix on windows 2000.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top