Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

A disaster
recovery utility that restores default
domain policy
and/or default domain-controller policies to their default state
after initial installation.

Syntax

dcgpofix [/target: {domain | dc | both}] [/ignoreschema]

Options

/target: {domain | dc | both}

Specifies target domain, domain controller, or both (if omitted,
defaults to both)

/ignoreschema

Ignores Active Directory schema version number at your peril

Examples

dcgpofix 
Microsoft(R) Windows(R) Operating System Default Group Policy Restore 
Utility v5.1
Copyright (C) Microsoft Corporation. 1981-2003
Description: Recreates the Default Group Policy Objects (GPOs) for a domain
Syntax: DcGPOFix [/ignoreschema] [/Target: Domain | DC | BOTH]
This utility can restore either or both the Default DomainPolicy or the
Default Domain Controllers Policy to the state that exists immediately after
a clean install. You must be a domain administrator to perform this operation.
WARNING: YOU WILL LOSE ANY CHANGES YOU HAVE MADE TO THESE GPOs. THIS UTILITY
IS INTENDED ONLY FOR DISASTER RECOVERY PURPOSES.
You are about to restore Default Domain policy  and Default domain 
Controller policy for the following domainmtit.local
Do you want to continue: <Y/N>? y
WARNING: This operation will replace all 'User Rights Assignments' made in 
the chosen GPOs. This may render some server applications to fail. Do you 
want to continue: <Y/N>? y
The Default Domain Policy was restored successfully
Note: Only the contents of the Default Domain Policy was restored. Group 
Policy links to this Group Policy Object were not altered.
By default, The Default Domain Policy is linked to the Domain.
The Default Domain Controller Policy was restored successfully
Note: Only the contents of the Default Domain Controller Policy was 
restored. Group Policy links to this Group Policy Object were not altered.
By default, The Default Domain Controller Policy is linked to the Domain 
Controllers OU.

Notes

• When you run dcgpofix, you will lose any changes
  made to these Group Policy objects.

• The /ignoreschema switch enables
  dcgpofix to work with different versions of Active
  Directory, but make sure you use the version of
  dcgpofix included with your current version of
  Active Directory.

See Also

Group Policy