How to manually create Default Domain GPOs

There is a way to create Default Domain GPO. There are two GPO created when you promote a member computer or a stand-alone server to domain controller.

These two GPOs are :

  • Default Domain Group Policy
  • Default Domain Controller Group Policy.

These GPO are stored in the SYSVOL folder. Netlogon service creates two permanent GUID for these two GPO under SYSVOL folder:

          \Windows\SYSVOL\sysvol\domain.com\policies\GUID

Domain Default GPO GUID {31B2F340-016D-11D2-945F-00C04FB984F9}

Domain Controller Default GPO GUID {31B2F210-016D-11D2-945F-00C04FB981F1}

Windows OS identifies default domain policies by its GUIDs located in SYSVOL folder. These GUIDs are unique for Default Domain Policy and Default Domain Controller Policy created by default.

You can use the following steps to create the Default GPOs manually:

1. Open ADUC

2. Right click on Domain_name.com > Property

3. Switch to Group Policy tab

4. Create a policy named “Default Domain Policy” or you can rename it if you want. AD Tools queries default domain policies by their GUIDs located in SYSVOL folder and not by name.

5. Click this GPO > Property > note down the GUID of this GPO created.

6. Go to SYSVOL folder and change the GUID to default domain policy or default domain controller policy.

7. Next you need to use a small script using ADSI to set this unique GUID into GPC of this policy in AD database. You can also edit Schema manually to do so.
Here are some articles that you can use to troubleshoot Group Policy:

You can also use ADSI Edit to create the GUID in GPC:

GPC container.

 

Troubleshooting Group Policy issues in Windows
http://www.microsoft.com/technet/community/columns/profwin/pw0502.mspx
How to reset security settings in GPO
http://support.microsoft.com/?kbid=226243
Scripting GPO
http://www.windowsitpro.com/Article/ArticleID/40231/40231.html?Ad=1

Using Dcgpofix.exe:

You can also use Dcgpofix.exe to restore Default GPO.

Have a look here for Dcgpofix.exe:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/48872034-1907-4149-b6aa-9788d38209d2.mspx

The Dcgpofix tool does not restore security settings in the Default Domain Controller Policy to their original state

http://support.microsoft.com/?KBID=833783

25 thoughts on “How to manually create Default Domain GPOs”

  1. But how do you do this:

    7. Next you need to use a small script using ADSI to set this unique GUID into GPT of this policy in AD database. You can also edit Schema manually to do so.

  2. A PhD level is really important issue for scholars. Who can assist students in phd thesis related to this good topic writing? We will suggest to purchase the thesis at the dissertation writing service. Hoping that this proposition can help students!

  3. I’d like to suggest people to appreciate comments more, even a bully writing spam comments also takes time. However, to buy an essay will give you a chance to reach academic success.

  4. Any course you determine upon, there is ever someone to tell you that you are failer. There are ever difficulties arising which entice you to consider that your critics are right. But our service will facilitate you at anywhen to write your dissertation. I propose youthesis help that will support you in your students life. We will support you to arise and become a prosperous student!

  5. A really courteous idea just about this. Study and don’t forget – if you have to work and study at the same time, there are old pros who are ready to avail you with your essays when you under time pressure. I’d suggest in this case the most predictable amongs buy dissertation where you can barter for custom content.

  6. There are extraordinary tips about the way to have the academic success. Thence, people require know the data and finish the amazing book reports essay paper. The easier way is to search for the professional high quality custom essay writing service and just buy book reports in web. I hope this helps some students.

  7. No one in the whole world is able to support you with academic assignments finishing better than reputable writing company can do. Thence, that will be ok if you buy essay writing at the professional custom company.

  8. Different students have talents to compose a smashing knowledge referring to this good topic but most of them are short of time for this issue. Therefore, every dissertation service is able to assist all the students with the msc thesis creating. And by the way, this can save time.

Leave a Reply

Your email address will not be published. Required fields are marked *