Default domain policy

[irsprint84]

My default policy has something in it that seems to cause problems but I cant get rid of it and I ve tried so please no suggestions on how to get rid!

 

So the only advise I would like to know is could I create a new default domain policy, put old settings into new one, activate new default policy and de-activate default policy?

[MrEprise]

I certainly don't see a problem in doing this as there is nothing particularly special about the Default Domain Policy as it is just like any other Group Policy, except its meant to be applied to the whole domain instead of certain OUs.

[witch]

I've done it and it was fine - When I was done I just renamed the old one and left it there while I checked what was happening for a while before I deleted it.

Just out of interest - what is it you can't get rid of?

[irsprint84]

Some dodgy adm template before my time plus I want to clean out default policy because shouldnt be anything in there really

[sukh]

@irsprint84 - Creating a new policy should be fine as long as you copy the setting you wish across to the new DDP. I would however, backup all your current settings and then create/modify/delete after.

 

The same process for most AD's.

 

Back up a Group Policy object using GPMC: Group Policy

 

Sukh