Domain controler Secutiry Policy has been deleted from the file system
Posted on 2003-11-26
I am a network admin. I inherited this botched bag of @#$# as do all admins in for the first few months….. Anyway
The domain security and domain controller security policies which are access by clicking on [Start>programs>administrative tools>] have been deleted at the file system level.
When I try to access I get an error message that it can not access files, and under details it states the files can not be found. When a policy is created or modified via Active Directory for an OU or from the ones in question from the administrative tools the file is actually stored in [C:\WINNT\SYSVOL\domain\Policies] directory. These were at one time cleared out at the file system level.
My question is how to I recreate this policy object so they can be modified. Do I need to obtain an ADM file or is there a command or utility that will do this for me.
I need to add a domain controller to the domain but the domain. I am getting a permissions issue when I run DCPROMO no matter what account I use when it tries to modify the machine account and add it to the domain controllers group; I would love to trash this bag of tricks and set the domain up correctly but it is not an option. All server upgrades are expected with no down time and no user issues.