|
View Full Version : Domain Controller Security Policy
Hi,
I have an Windows 2000 SBS server as a domain controller with another
Windows 2000 Server as an additional domain controller.
All of the default settings such as "Password" Policies were present inthe
"Domain Controller Security Policy" , until one day all of the settings were
gone and became "undefined".
The "Domain Security Policy" only showed "IP Security Policies on Active
Directory" and "Public Key Policies".
Does anyone know how I can get back the default settings or what happened
with the default settings?
Thanks.
Peter
Password policies are defined in Domain Policy and they have no efect in domain Controllers Policy. I don't quite understand, what you mean by gone. Are you missing all folders with policy settings or the policies are jus undefined ? To get policies back, you would have to restore your server system state. -- Matjaž Ladava, MCSA, MCSE, MCT, MVP Microsoft MVP Windows Server - Active Directory matjaz@ladava.com, matjazl@mvps.org "peter" wrote in message
news:O6v5iLC6DHA.1636@TK2MSFTNGP12.phx.gbl...
> Hi,
>
> I have an Windows 2000 SBS server as a domain controller with another
> Windows 2000 Server as an additional domain controller.
>
> All of the default settings such as "Password" Policies were present inthe
> "Domain Controller Security Policy" , until one day all of the settings
were
> gone and became "undefined".
>
> The "Domain Security Policy" only showed "IP Security Policies on Active
> Directory" and "Public Key Policies".
>
> Does anyone know how I can get back the default settings or what happened
> with the default settings?
>
> Thanks.
>
> Peter
>
>
>
Well, in the Domain Controller Security Policy, the items such as items for the password policy are all undefined. In the Domain Security Policy, the folders are missing. Thanks. Peter "Matjaz Ladava [MVP]" wrote in message
news:eJmsFNE6DHA.3548@TK2MSFTNGP11.phx.gbl...
> Password policies are defined in Domain Policy and they have no efect in
> domain Controllers Policy. I don't quite understand, what you mean by
gone.
> Are you missing all folders with policy settings or the policies are jus
> undefined ? To get policies back, you would have to restore your server
> system state.
>
> --
> Matja?Ladava, MCSA, MCSE, MCT, MVP
> Microsoft MVP Windows Server - Active Directory
> matjaz@ladava.com, matjazl@mvps.org
>
> "peter" wrote in message
> news:O6v5iLC6DHA.1636@TK2MSFTNGP12.phx.gbl...
> > Hi,
> >
> > I have an Windows 2000 SBS server as a domain controller with another
> > Windows 2000 Server as an additional domain controller.
> >
> > All of the default settings such as "Password" Policies were present
inthe
> > "Domain Controller Security Policy" , until one day all of the settings
> were
> > gone and became "undefined".
> >
> > The "Domain Security Policy" only showed "IP Security Policies on
Active
> > Directory" and "Public Key Policies".
> >
> > Does anyone know how I can get back the default settings or what
happened
> > with the default settings?
> >
> > Thanks.
> >
> > Peter
> >
> >
> >
>
>
Undefined in Domain Controllers Security Policy is ok, as I said, that this is set at Domain Security Policy. It is strange, that you are missing this folders. To restore your Domain policy, there are two options: 1. From backup 2. Call Microsoft PSS and request a tool recreateDefPol.exe, which recreates default security policy for Domain Policy and domain Controllers Policy. -- Matjaz Ladava, MCSA, MCSE, MCT, MVP Microsoft MVP Windows Server - Active Directory matjaz@ladava.com, matjazl@mvps.org "peter" wrote in message
news:O$2j4ZK6DHA.1948@TK2MSFTNGP12.phx.gbl...
> Well, in the Domain Controller Security Policy, the items such as items
for
> the password policy are all undefined.
>
> In the Domain Security Policy, the folders are missing.
>
> Thanks.
>
> Peter
>
> "Matjaz Ladava [MVP]" wrote in message
> news:eJmsFNE6DHA.3548@TK2MSFTNGP11.phx.gbl...
> > Password policies are defined in Domain Policy and they have no efect in
> > domain Controllers Policy. I don't quite understand, what you mean by
> gone.
> > Are you missing all folders with policy settings or the policies are jus
> > undefined ? To get policies back, you would have to restore your server
> > system state.
> >
> > --
> > Matja?Ladava, MCSA, MCSE, MCT, MVP
> > Microsoft MVP Windows Server - Active Directory
> > matjaz@ladava.com, matjazl@mvps.org
> >
> > "peter" wrote in message
> > news:O6v5iLC6DHA.1636@TK2MSFTNGP12.phx.gbl...
> > > Hi,
> > >
> > > I have an Windows 2000 SBS server as a domain controller with another
> > > Windows 2000 Server as an additional domain controller.
> > >
> > > All of the default settings such as "Password" Policies were present
> inthe
> > > "Domain Controller Security Policy" , until one day all of the
settings
> > were
> > > gone and became "undefined".
> > >
> > > The "Domain Security Policy" only showed "IP Security Policies on
> Active
> > > Directory" and "Public Key Policies".
> > >
> > > Does anyone know how I can get back the default settings or what
> happened
> > > with the default settings?
> > >
> > > Thanks.
> > >
> > > Peter
> > >
> > >
> > >
> >
> >
>
>
What is Microsoft PSS? Is that like Microsoft technical support? "Matjaz Ladava [MVP]" wrote in message
news:uvOrWML6DHA.2524@TK2MSFTNGP11.phx.gbl...
> Undefined in Domain Controllers Security Policy is ok, as I said, that
this
> is set at Domain Security Policy. It is strange, that you are missing this
> folders. To restore your Domain policy, there are two options:
>
> 1. From backup
> 2. Call Microsoft PSS and request a tool recreateDefPol.exe, which
recreates
> default security policy for Domain Policy and domain Controllers Policy.
>
> --
>
> Matjaz Ladava, MCSA, MCSE, MCT, MVP
> Microsoft MVP Windows Server - Active Directory
> matjaz@ladava.com, matjazl@mvps.org
>
>
> "peter" wrote in message
> news:O$2j4ZK6DHA.1948@TK2MSFTNGP12.phx.gbl...
> > Well, in the Domain Controller Security Policy, the items such as items
> for
> > the password policy are all undefined.
> >
> > In the Domain Security Policy, the folders are missing.
> >
> > Thanks.
> >
> > Peter
> >
> > "Matjaz Ladava [MVP]" wrote in message
> > news:eJmsFNE6DHA.3548@TK2MSFTNGP11.phx.gbl...
> > > Password policies are defined in Domain Policy and they have no efect
in
> > > domain Controllers Policy. I don't quite understand, what you mean by
> > gone.
> > > Are you missing all folders with policy settings or the policies are
jus
> > > undefined ? To get policies back, you would have to restore your
server
> > > system state.
> > >
> > > --
> > > Matja?Ladava, MCSA, MCSE, MCT, MVP
> > > Microsoft MVP Windows Server - Active Directory
> > > matjaz@ladava.com, matjazl@mvps.org
> > >
> > > "peter" wrote in message
> > > news:O6v5iLC6DHA.1636@TK2MSFTNGP12.phx.gbl...
> > > > Hi,
> > > >
> > > > I have an Windows 2000 SBS server as a domain controller with
another
> > > > Windows 2000 Server as an additional domain controller.
> > > >
> > > > All of the default settings such as "Password" Policies were present
> > inthe
> > > > "Domain Controller Security Policy" , until one day all of the
> settings
> > > were
> > > > gone and became "undefined".
> > > >
> > > > The "Domain Security Policy" only showed "IP Security Policies on
> > Active
> > > > Directory" and "Public Key Policies".
> > > >
> > > > Does anyone know how I can get back the default settings or what
> > happened
> > > > with the default settings?
> > > >
> > > > Thanks.
> > > >
> > > > Peter
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
Microsoft Product support Services. You can find their phone number on support.microsoft.com Regards -- Matjaz Ladava, MCSA, MCSE, MCT, MVP Microsoft MVP Windows Server - Active Directory matjaz@ladava.com, matjazl@mvps.org "peter" wrote in message
news:u8P54EZ6DHA.2952@tk2msftngp13.phx.gbl...
> What is Microsoft PSS?
>
> Is that like Microsoft technical support?
>
>
> "Matjaz Ladava [MVP]" wrote in message
> news:uvOrWML6DHA.2524@TK2MSFTNGP11.phx.gbl...
> > Undefined in Domain Controllers Security Policy is ok, as I said, that
> this
> > is set at Domain Security Policy. It is strange, that you are missing
this
> > folders. To restore your Domain policy, there are two options:
> >
> > 1. From backup
> > 2. Call Microsoft PSS and request a tool recreateDefPol.exe, which
> recreates
> > default security policy for Domain Policy and domain Controllers Policy.
> >
> > --
> >
> > Matjaz Ladava, MCSA, MCSE, MCT, MVP
> > Microsoft MVP Windows Server - Active Directory
> > matjaz@ladava.com, matjazl@mvps.org
> >
> >
> > "peter" wrote in message
> > news:O$2j4ZK6DHA.1948@TK2MSFTNGP12.phx.gbl...
> > > Well, in the Domain Controller Security Policy, the items such as
items
> > for
> > > the password policy are all undefined.
> > >
> > > In the Domain Security Policy, the folders are missing.
> > >
> > > Thanks.
> > >
> > > Peter
> > >
> > > "Matjaz Ladava [MVP]" wrote in message
> > > news:eJmsFNE6DHA.3548@TK2MSFTNGP11.phx.gbl...
> > > > Password policies are defined in Domain Policy and they have no
efect
> in
> > > > domain Controllers Policy. I don't quite understand, what you mean
by
> > > gone.
> > > > Are you missing all folders with policy settings or the policies are
> jus
> > > > undefined ? To get policies back, you would have to restore your
> server
> > > > system state.
> > > >
> > > > --
> > > > Matja?Ladava, MCSA, MCSE, MCT, MVP
> > > > Microsoft MVP Windows Server - Active Directory
> > > > matjaz@ladava.com, matjazl@mvps.org
> > > >
> > > > "peter" wrote in message
> > > > news:O6v5iLC6DHA.1636@TK2MSFTNGP12.phx.gbl...
> > > > > Hi,
> > > > >
> > > > > I have an Windows 2000 SBS server as a domain controller with
> another
> > > > > Windows 2000 Server as an additional domain controller.
> > > > >
> > > > > All of the default settings such as "Password" Policies were
present
> > > inthe
> > > > > "Domain Controller Security Policy" , until one day all of the
> > settings
> > > > were
> > > > > gone and became "undefined".
> > > > >
> > > > > The "Domain Security Policy" only showed "IP Security Policies on
> > > Active
> > > > > Directory" and "Public Key Policies".
> > > > >
> > > > > Does anyone know how I can get back the default settings or what
> > > happened
> > > > > with the default settings?
> > > > >
> > > > > Thanks.
> > > > >
> > > > > Peter
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
|
|
|
|
|
|
|
|
|