| dcgpofix |
A disaster recovery utility that restores default domain policy and/or default domain-controller policies to their default state after initial installation.
dcgpofix [/target: {domain | dc | both}] [/ignoreschema]
/target: {domain | dc | both}
Specifies target domain, domain controller, or both (if omitted, defaults to both)
/ignoreschema
Ignores Active Directory schema version number at your peril
dcgpofix Microsoft(R) Windows(R) Operating System Default Group Policy Restore Utility v5.1 Copyright (C) Microsoft Corporation. 1981-2003 Description: Recreates the Default Group Policy Objects (GPOs) for a domain Syntax: DcGPOFix [/ignoreschema] [/Target: Domain | DC | BOTH] This utility can restore either or both the Default DomainPolicy or the Default Domain Controllers Policy to the state that exists immediately after a clean install. You must be a domain administrator to perform this operation. WARNING: YOU WILL LOSE ANY CHANGES YOU HAVE MADE TO THESE GPOs. THIS UTILITY IS INTENDED ONLY FOR DISASTER RECOVERY PURPOSES. You are about to restore Default Domain policy and Default domain Controller policy for the following domainmtit.local Do you want to continue: <Y/N>? y WARNING: This operation will replace all 'User Rights Assignments' made in the chosen GPOs. This may render some server applications to fail. Do you want to continue: <Y/N>? y The Default Domain Policy was restored successfully Note: Only the contents of the Default Domain Policy was restored. Group Policy links to this Group Policy Object were not altered. By default, The Default Domain Policy is linked to the Domain. The Default Domain Controller Policy was restored successfully Note: Only the contents of the Default Domain Controller Policy was restored. Group Policy links to this Group Policy Object were not altered. By default, The Default Domain Controller Policy is linked to the Domain Controllers OU.
When you run dcgpofix, you will lose any changes made to these Group Policy objects.
The /ignoreschema switch enables dcgpofix to work with different versions of Active Directory, but make sure you use the version of dcgpofix included with your current version of Active Directory.
Group Policy