Default Domain Policy deleted

I have a 2012 test server.  I was messing around with a central store for gpo's.  While I was creating the centralized store, I renamed the wrong folder.  This caused group policy management to display an error that I couldn't find or read the GPO for the default domain policy.  Before I figured out that I renamed the wrong directory, I deleted the default domain policy, so that I could recreate it.  I later found that I had renamed the wrong directory in sysvol.  But the damage was done and now I can't create a default policy.
I can't quite figure out how to recreate it.  Can anyone help?

BTW I could easily just wipe the domain and start over, but I want to learn how to recover from an error like this incase I encounter a client who did something as stupid as me, but in production.
LVL 3
wiglackAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rob StoneCommented:
0
Nick RhodeIT DirectorCommented:
You can probably use the command: dcgpofix

http://technet.microsoft.com/en-us/library/hh875588.aspx
0
wiglackAuthor Commented:
I already tried dcgpofix.  That didn't work.  I hadn't tried with the /ignorschema switch, but that didn't work either.

@Stoner79: I tried the first kb article you posted, but there is on GPO tab in ADUC.  Any suggestions?
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

Mike KlineCommented:
Did you get any errors when you ran the command?  So the default domain policy was deleted?  I'm asking because I may spin up a VM and test this on 2012 (never tried on 2012)

Thanks

Mike
0
wiglackAuthor Commented:
No errors running  dcgpofix /ignoreschema /target:Domain  I also tried dcgpofix /target:both.

It appears the policy is in the sysvol folder, but it doesn't appear in group policy management.  When I try to create a new policy called Default Domain Policy, I get an error that GPO with this name already exists.
0
SandeshdubeySenior Server EngineerCommented:
It seems that the policy is still present in AD database.Open ADSiedit and check for the orphan gpo guid.

Path=CN=Policies,CN=System,DC=DomainName,DC=com by using ADSIEDIT.msc

I will also recommend before you proceed with deletition.Download resource kit tool and run gpotool.You will het the policy quid details and policy name and then proceed with deletion.http://www.microsoft.com/en-in/download/details.aspx?id=17657

Do you have sysvol backup.If yes then you can restore the policies and script folder on DC and perfrom authorative and non authorative restore of sysvol.

If no backup and default domain contoller and default domain policy is missing then you need to run dcgpofix.

To reset the Domain GPO, type dcgpofix /target:Domain
To reset the Default DC GPO, type dcgpofix /target:DC
To reset both the Domain and Default DC GPOs, type dcgpofix /target:both

Note:
Domain GPO GUID -{31B2F340-016D-11D2-945F-00C04FB984F9}
DC GPO GUID - {6AC1786C-016F-11D2-945F-00C04FB984F9}
http://support.microsoft.com/kb/556025

Hope this helps
0
wiglackAuthor Commented:
I don't have a sysvol backup, shadow copies weren't turned on, and there is no hyperv snapshot.

I can't delete it with ADSI edit either.

error
Both of those GUID's are in the sysvol folder.
0
SandeshdubeySenior Server EngineerCommented:
Both the quids are in sysvol then why are you deleting.It seeem to be permission issue.Before you proceed with deletion can you post the gpotool output.
0
wiglackAuthor Commented:
C:\Program Files (x86)\Windows Resource Kits\Tools>gpotool
Validating DCs...
Available DCs:
DC1.home.wiglack.com
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Policy OK
============================================================

Policies OK

C:\Program Files (x86)\Windows Resource Kits\Tools>
0
SandeshdubeySenior Server EngineerCommented:
The policy status is good dont delete the guid.Checked that 31B2F340-016D-11D2-945F-00C04FB984F9 and 6AC1786C-016F-11D2-945F-00C04FB984F9 policy guid is present in sysvol/policies folder.
0
wiglackAuthor Commented:
Yes they match sysvol\policies
0
compdigit44Commented:
From you post it appears your default domain and domain controllers policy are present but you mentioned that they are not showing up in GPMC, is this correct?

If so, try to clear you MMC cache in your profile.

Which can be found in the following location: C:\Users\%username%\AppData\Roaming\Microsoft\MMC
0
wiglackAuthor Commented:
@compdigit44: I did that, no change.  I rebooted after deleting the files.  No dice.  I logged in as a new user and there still is no Default Domain Policy.
0
compdigit44Commented:
Ok so when you run the gpotool it is showing the default domain / domain controllers policies named correctly, but not via GPMC is this correct.

If so, can you please upload a screen shot of what you are seeing in GPMC.
0
wiglackAuthor Commented:
gpo error
0
compdigit44Commented:
Ok accoding to your screen shot everything looks correct. You just have to link the default GP to the domain and the other to the default DC's OU
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
wiglackAuthor Commented:
How would I do that?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.