Resetting Default Domain GPO to original state

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hello,

I am trying to get my Defualt Domain GPO under control. I inhereited an
installation that was undocumented and I need to get AD back to known state.
I have read KBAs 267553 and 226243 which tell you how to reset security
settings and user rights in the Default Domain policy. The articles talk
about the GptTmpl.inf file and how to modify it. This partcluar file in my
case is enormous and the articles only mention touching about 20 lines of
it. Our file has hundreds of File System entries as well as hundreds of
Registry entries.

Questions.

1. By defualt does the GptTmpl.inf file have File System and Registry
entries?
2. How would I go about getting rid of all the entries if I decided they
were of no use?

Thank you,

Pedro

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Pedro,

Thank you for your reply.

If you have any updates, please let me know.

Have a nice day!

Thanks and regards,

Alex Zhang
Microsoft Partner Online Support
Get Secure! - <www.microsoft.com/security>
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Reply-To: "Pete" <sistemas@aspro-ocio.es>
| From: "Pete" <sistemas@aspro-ocio.es>
| References: <O29QR75IEHA.3440@TK2MSFTNGP09.phx.gbl>
<Ia1fm$cJEHA.2112@cpmsftngxa10.phx.gbl>
| Subject: Re: Resetting Default Domain GPO to original state
| Date: Mon, 26 Apr 2004 14:25:04 +0200
| Lines: 91
| Organization: Aspro Ocio
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <uCXeCm4KEHA.1272@tk2msftngp13.phx.gbl>
| Newsgroups: microsoft.public.win2000.group_policy
| NNTP-Posting-Host: 212.49.167.241
| Path:
cpmsftngxa10.phx.gbl!TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08
phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.group_policy:26513
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| Thank you Alex. I will let you know how it turns out.
|
|
|
| "Alex Zhang(MSFT)" <v-qiz@online.microsoft.com> wrote in message
| news:Ia1fm$cJEHA.2112@cpmsftngxa10.phx.gbl...
| > Hello Pedro,
| >
| > Thank you for posting here.
| >
| > By default, there are Registry entries in the GptTmpl.inf file. However
| > there are only a few entries, not hundreds of them. It is because you
| > inherited an installation.
| >
| > To completely reset the user rights to the default settings, you could
| > rename the GptTmpl.inf file, and then create a new GptTmpl.inf file with
| > the default user-rights information in the KB 267553. You can copy and
| then
| > paste the appropriate section into the new GptTmpl.inf file.
| >
| > In addition, I attached a .zip file in this post. You could use this
tool
| > to achieve the same goal.
| >
| > Some related information:
| >
| > Group Policy Storage
| >
|
http://www.microsoft.com/windows20 [...] s/dsec/dse
| > c_pol_cxxv.asp
| >
| > I hope this information proves helpful to you.
| > If you have any questions or concerns, please do not hesitate to let me
| > know. I am happy to be of assistance.
| >
| > Thanks and regards,
| > Alex Zhang
| > Microsoft Partner Online Support
| > Get Secure! - www.microsoft.com/security
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | Reply-To: "Pete" <sistemas@aspro-ocio.es>
| > | From: "Pete" <sistemas@aspro-ocio.es>
| > | Subject: Resetting Default Domain GPO to original state
| > | Date: Fri, 16 Apr 2004 12:37:27 +0200
| > | Lines: 23
| > | Organization: Aspro Ocio
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <O29QR75IEHA.3440@TK2MSFTNGP09.phx.gbl>
| > | Newsgroups: microsoft.public.win2000.group_policy
| > | NNTP-Posting-Host: 212.49.167.241
| > | Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:22822
| > | X-Tomcat-NG: microsoft.public.win2000.group_policy
| > |
| > | Hello,
| > |
| > | I am trying to get my Defualt Domain GPO under control. I inhereited
an
| > | installation that was undocumented and I need to get AD back to known
| > state.
| > | I have read KBAs 267553 and 226243 which tell you how to reset
security
| > | settings and user rights in the Default Domain policy. The articles
talk
| > | about the GptTmpl.inf file and how to modify it. This partcluar file
in
| my
| > | case is enormous and the articles only mention touching about 20 lines
| of
| > | it. Our file has hundreds of File System entries as well as hundreds
of
| > | Registry entries.
| > |
| > | Questions.
| > |
| > | 1. By defualt does the GptTmpl.inf file have File System and Registry
| > | entries?
| > | 2. How would I go about getting rid of all the entries if I decided
they
| > | were of no use?
| > |
| > | Thank you,
| > |
| > | Pedro
| > |
| > |
| > |
|
|
|