Volker, Thanks for your response:
1. - Already tried this, didn't work. 2. - dcgpofix - is this a windows 2003 only tool? I am running 2000. Regards Adam -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 31 January 2005 13:06 To: [email protected] Subject: RE: [ActiveDir] Missing 'default domain policy gpo' in sysvol folder Hi, check two things (I'm not sure if this works if the policy is deleted, but maybe the dcgpofix tool can help): 1. check http://support.microsoft.com/?kbid=226243 2. use the tool dcgpofix Log on as a domain administrator to a DC. Start a command session. To reset the Domain GPO, type dcgpofix /target:Domain To reset the Default DC GPO, type dcgpofix /target:DC To reset both the Domain and Default DC GPOs, type dcgpofix /target:both After you enter the appropriate command in Step 3, enter Y to both prompts. Close the command window. regards Volker > I have the KB for the security settings, but I cannot find anything on > actually regenerating the GPO other than a restore. Restore is not an > option. > > Thanks > > Adam > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Peter Johnson > Sent: 31 January 2005 12:38 > To: [email protected] > Subject: RE: [ActiveDir] Missing 'default domain policy gpo' in sysvol > folder > > IIRC there is a MS doc on recovering the default GPO and security > settings. > This might apply in this scenario? > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of knighTslayer > Sent: 31 January 2005 14:23 > To: [email protected] > Subject: RE: [ActiveDir] Missing 'default domain policy gpo' in sysvol > folder > > There is one more domain controller in this domain, and that too has > the files missing. > > I will look at the file recovery, but I doubt very much that I will > recover it. > > Thanks for your help so far. > > Anyone else got any ideas? > > Regards > > Adam > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chandra Burra > Sent: 31 January 2005 12:15 > To: [email protected] > Subject: Re: [ActiveDir] Missing 'default domain policy gpo' in sysvol > folder > > Do that domain has a replication partner.....if yes can you check on > that server if you can copy that folder off... > > others i can think of is the tool to restore the deleted items from > the harddisk - like File restore from winternals > > > On Mon, 31 Jan 2005 11:48:14 -0000, knighTslayer > <[EMAIL PROTECTED]> wrote: >> The GPO GUID is missing from the sysvol directory. I understand your >> suggestion about the permissions and I followed the KB which relates >> to this, but simply, the object (folder) is missing from the sysvol > folder. >> >> I am unable to edit it, because it is missing. >> >> Adam >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Chandra >> Burra >> >> Sent: 31 January 2005 11:36 >> To: [email protected] >> Subject: Re: [ActiveDir] Missing 'default domain policy gpo' in >> sysvol > >> folder >> >> Adam., >> >> If i understood the problem correct --> you are able to c the GP In >> the GPUC >> --> but are not able to edit. >> >> then can you confirm that the object exisit. Go to GPUC--> System --> >> Polocies and check for the GP SID u r mentionging. >> >> If that exisits and you are not able to edit that GP then its simply >> issue with permissions on that child domain. >> >> Regards, >> Chandra >> >> On Mon, 31 Jan 2005 11:14:14 -0000, knighTslayer >> <[EMAIL PROTECTED]> wrote: >> > Chandra, thanks for your response. I looked in Lost and found and >> > it is empty. >> > >> > Regards >> > >> > Adam >> > >> > -----Original Message----- >> > From: [EMAIL PROTECTED] >> > [mailto:[EMAIL PROTECTED] On Behalf Of Chandra >> > Burra >> > Sent: 31 January 2005 11:08 >> > To: [email protected] >> > Subject: Re: [ActiveDir] Missing 'default domain policy gpo' in >> > sysvol folder >> > >> > did u try in Lost and Found >> > >> > AD users & Computes --> View --> Advanced Features ( check this) to >> > get more folders on the left panel. >> > >> > Regards, >> > Chandra >> > >> > On Mon, 31 Jan 2005 10:26:33 -0000, knighTslayer >> > <[EMAIL PROTECTED]> wrote: >> > > Hi, >> > > >> > > Running Windows 2000 sp4 Active Directory. >> > > Domain concerned is a child domain off the root domain. >> > > >> > > I cannot edit the default domain policy object through ADUC or >> > > GPO > >> > > edit. I get a Group Policy Error: >> > > >> > > "Failed to open the Group Policy Object. You may not have >> > > appropriate rights." >> > > >> > > I followed KB 294275, however it occurred to me that the actual >> > > folder is missing in \Sysvol\Domain\Policies\ >> > "{6AC1786C-016F-11D2-945F-00C04fB984F9}" >> > > >> > > There are no backups or copies of the directories anywhere. This >> > > is a domain without users (yet) and was set-up by another 3rd >> > > party under the control of the root domain admins. >> > > >> > > Can I regenerate the default domain gpo or is there another >> > > option > >> > > to recreate this? >> > > >> > > TIA >> > > >> > > Adam >> > > >> > > List info : http://www.activedir.org/List.aspx >> > > List FAQ : http://www.activedir.org/ListFAQ.aspx >> > > List archive: >> > > http://www.mail-archive.com/activedir%40mail.activedir.org/ >> > > >> > List info : http://www.activedir.org/List.aspx >> > List FAQ : http://www.activedir.org/ListFAQ.aspx >> > List archive: >> > http://www.mail-archive.com/activedir%40mail.activedir.org/ >> > >> > List info : http://www.activedir.org/List.aspx >> > List FAQ : http://www.activedir.org/ListFAQ.aspx >> > List archive: >> > http://www.mail-archive.com/activedir%40mail.activedir.org/ >> > >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
