Avatar of Marka Mekapse
Marka Mekapse
Flag for United States of America asked on

Default Domain Policy missing GPO

Greetings

Dealing with an issue here and do not understand as how this came to be,  I have 4 Dc's that are showing the same behavior where i cannot see the account policies from within the Default Domain GPO.  I have moved the PDC Emulator to all 4 servers and tested in hopes that i would be able to setup an account security policy of password length and complexity.  i have also checked for backups of the GPO and find none.

when i view the default domain policy under settings i see the account policies  
Default Domain GPO Settings view
but when i go to edit them from the GPO, they are missing
 Defualt Domain Edit View
any ideas on how i can regenerate the default domain policy??
Active DirectoryWindows 10AzureWindows Server 2016

Avatar of undefined
Last Comment
oBdA

8/22/2022 - Mon
Pete Long

Im confused what's here.......

policy
oBdA

I guess the Account Policies, Local Policies, Event Log, ... entries are missing as well when editing another GPO?
Try to run a
regsvr32.exe C:\Windows\System32\wsecedit.dll

Open in new window

and restart the GPMC.
This is a bit older, but the GP management didn't change a lot:
Some Group Policy areas are missing from the Group Policy Editor
https://support.microsoft.com/en-us/help/555218
Marka Mekapse

ASKER
hi oBdA - thanks but i have tried that

i receive the following when i attempt to register it

DLLRegisterService
i restarted the GPMC  and that didn't help either.
Your help has saved me hundreds of hours of internet surfing.
fblack61
ASKER CERTIFIED SOLUTION
Marka Mekapse

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
oBdA

That's why I asked if that happens as well when you edit other GPOs, which doesn't seem to be the case. When the security settings are present in other GPOs, it can't be an issue with the MMC itself.
If it only happens with the Default Domain Policy, then it seems that it somehow has gotten corrupt (but not corrupt enough so that you can still see the settings - strange). If you don't have any other settings in there (you shouldn't - Default Domain Policy and Default Domain Controller Policy should always be left unchanged), you can reset it (well, you can reset it as well if there are configurations in there, but these will be lost ...)
dcgpofix.exe /Target:Domain

Open in new window

dcgpofix
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix