• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 195
  • Last Modified:

tidy up windows 2003 AD

any way to revert to default rights, ever since i started to remove some users from domain admins and delegate them rights I have had lots of errors i know the little fixes to get the inheritence flags  but not to great sucsess

any health checks for AD?
  • 2
1 Solution
Matthew MillersCommented:
What issues are you having?
mhamerAuthor Commented:
admin user moved out of domain admins     cant edit existing users   (new ones are ok)  
known issue when moving from protected group

not able to authenticate a UTM device which works fine on any test Ad

You can use the dcgpofix command to revert back to the original version.
This tool is available in the %systemroot%\system32 directory on Windows Server 2003. Be sure this is what you want to do before doing it. Think about all or any changes that have been made to the default settings.


mhamerAuthor Commented:
thanks used this in part with switches and once found seeting i liked alterd manually (for saftys sake)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now