Default Domain Policy missing GPO

Marka Mekapse
Marka Mekapse used Ask the Experts™

Dealing with an issue here and do not understand as how this came to be,  I have 4 Dc's that are showing the same behavior where i cannot see the account policies from within the Default Domain GPO.  I have moved the PDC Emulator to all 4 servers and tested in hopes that i would be able to setup an account security policy of password length and complexity.  i have also checked for backups of the GPO and find none.

when i view the default domain policy under settings i see the account policies  
Default Domain GPO Settings view
but when i go to edit them from the GPO, they are missing
 Defualt Domain Edit View
any ideas on how i can regenerate the default domain policy??
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Pete LongTechnical Consultant
Im confused what's here.......

Most Valuable Expert 2018
Distinguished Expert 2018
I guess the Account Policies, Local Policies, Event Log, ... entries are missing as well when editing another GPO?
Try to run a
regsvr32.exe C:\Windows\System32\wsecedit.dll

Open in new window

and restart the GPMC.
This is a bit older, but the GP management didn't change a lot:
Some Group Policy areas are missing from the Group Policy Editor
hi oBdA - thanks but i have tried that

i receive the following when i attempt to register it

i restarted the GPMC  and that didn't help either.
My solution was to create a new GPO and name it account settings.  i then can from there, make any modifications to the account policies i.e. password length, complexity etc.

the only thing i made sure was to place it at the top of the GPO list
Most Valuable Expert 2018
Distinguished Expert 2018
That's why I asked if that happens as well when you edit other GPOs, which doesn't seem to be the case. When the security settings are present in other GPOs, it can't be an issue with the MMC itself.
If it only happens with the Default Domain Policy, then it seems that it somehow has gotten corrupt (but not corrupt enough so that you can still see the settings - strange). If you don't have any other settings in there (you shouldn't - Default Domain Policy and Default Domain Controller Policy should always be left unchanged), you can reset it (well, you can reset it as well if there are configurations in there, but these will be lost ...)
dcgpofix.exe /Target:Domain

Open in new window


Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial