Default group policy GUIDs are as follows:
Default Domain Policy
31B2F340-016D-11D2-945F-00C04FB984F9
Default DC Policy
6AC1786C-016F-11D2-945F-00C04FB984F9
Recreates the default Group Policy Objects (GPOs) for a domain. To get to the Group Policy Management Console (GPMC), you must install Group Policy Management as a feature through Server Manager.
Important
As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. Additionally, you should configure the Default Domain Controllers Policy GPO only to set user rights and audit policies.
Syntax
dcgpofix [/ignoreschema] [/target: {domain | dc | both}] [/?]
Parameters
| /ignoreschema | Ignores the version of the Active Directory schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped. |
| /target {domain | dc | both | Specifies whether to target the Default Domain policy, the Default Domain Controllers policy, or both types of policies. |
| /? | Displays Help at the command prompt. |
Examples
To manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy, while ignoring the Active Directory schema version, type:
dcgpofix /ignoreschema /target:domain
To configure the Default Domain Controllers Policy GPO only to set user rights and audit policies, while ignoring the Active Directory schema version, type:
dcgpofix /ignoreschema /target:dc'IT이야기 > ActiveDirectory' 카테고리의 다른 글
| [Windows] Event Log를 필터링하기(XML을 통한 Custom View생성) (0) | 2022.12.13 |
|---|---|
| 특정 사용자 계정잠금 예외처리(Active Directory 관리 센터) (0) | 2022.12.13 |
| Troubleshooting Active Directory Replication (0) | 2022.11.25 |
| sid,SidHistory 값 출력하기 (0) | 2021.08.04 |
| 그룹 멤버 포함 체크 여부 (0) | 2021.08.04 |