Reversing a Domain Controllers Policy?

[Leigh Bennett]

Hi all, hope you can help me out with this one as i'm
stumped.

A previous sys admin here, had by mistake setup a policy
to lock down users desktops using the default domain
controllers policy. Once he realised his mistake, he
deleted the policy. Upon reloading a new ddc policy all
the settings appear to be at their default settings i.e.
most things not enabled. Even though he has deleted the
policy users still have the restrictions on thier
desktops, so the policy appears to have tattoo'd the
registry on the DC.
Because he deleted the policy and loaded a fresh one i now
cannot view any of the settings changes he made as they
all appear to be reset.

My question is, how do i view the changes that have been
made to the tattoo'd registry without having to find all
the corresponding keys? And if i do have to find them all,
how?

many thanks

 

[Buz Brodin [MSFT]]

Hello Leigh,

You may need to contact support to get the 6ac----- (Default Domain
Controller) policy back in place. You can also reset default security
settings in Windows 2000 by following the article below.

HOW TO: Reset Security Settings Back to the Defaults
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q313222

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.