Domain Controller Security Policy

[peter]

Hi,

I have an Windows 2000 SBS server as a domain controller with another
Windows 2000 Server as an additional domain controller.

All of the default settings such as "Password" Policies were present inthe
"Domain Controller Security Policy" , until one day all of the settings were
gone and became "undefined".

The "Domain Security Policy" only showed "IP Security Policies on Active
Directory" and "Public Key Policies".

Does anyone know how I can get back the default settings or what happened
with the default settings?

Thanks.

Peter

 

[Matjaz Ladava [MVP]]

Password policies are defined in Domain Policy and they have no efect in
domain Controllers Policy. I don't quite understand, what you mean by gone.
Are you missing all folders with policy settings or the policies are jus
undefined ? To get policies back, you would have to restore your server
system state.

 

[peter]

Well, in the Domain Controller Security Policy, the items such as items for
the password policy are all undefined.

In the Domain Security Policy, the folders are missing.

Thanks.

Peter

 

[Matjaz Ladava [MVP]]

Undefined in Domain Controllers Security Policy is ok, as I said, that this
is set at Domain Security Policy. It is strange, that you are missing this
folders. To restore your Domain policy, there are two options:

1. From backup
2. Call Microsoft PSS and request a tool recreateDefPol.exe, which recreates
default security policy for Domain Policy and domain Controllers Policy.

--

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)

 

[peter]

What is Microsoft PSS?

Is that like Microsoft technical support?

 

[Matjaz Ladava [MVP]]

Microsoft Product support Services. You can find their phone number on
support.microsoft.com

Regards

--

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)