Hello palls,
The disaster comes, when junior sysadmin tried to "help" mobile guy and tried to remove it from DDP (where are setup Folder redirect) and to return him files to laptop. If because this mobile guy was in local admins or never mind, but the result is non-accessible Default Domain Policy.
Long time ago I'd also go trough this "you don't have permissions to view this GPO"...tried same things like before no w/o luck.
So next/last step was DCGPOfix..yes I new the consequences but we was on hard line with users (all their files go back to the computers and startup was delayed 30-45 min, and password complexity was like a hammer). After restore original state like brand new DDP and DDCP I was planing to restore from regular backups with GPMC.
So here is the problem - DDP cant be restored, just one simple messages "Failed"
Default Domain Policy...Failed Cannot complete this function.
Restored default permissons of GPO with ADSI Edit. Restored manually permissions of \\DC\SYSVOL\\domain.com\\Policies\\{31B2F340-016D-11D2-945F-00C04FB984F9}. Restored the consistency with GMPC (popup message about uncosistency and OK to resolve) and no success with restore NOR import settings from backup:
Restore of GPO failed. Error [Cannot complete this function.] Details - Backup Directory: D:\GP Backup Instance : {5C7017D4-80E5-4B02-A1F6-4D63F2731AC3} Comment : 26.06 Destination GPO: DisplayName: Default Domain Policy ID: {31B2F340-016D-11D2-945F-00C04FB984F9} Domain: domain.com
Backups of GPOs are fine, tested with new GPO object and restored/imported settings.
Any ideas how to proceed with restore ?
just Topper