Forum Discussion
Windows Server 2012 R2 GPM>windows setting> security setting >Account Policy missing
Hello, Ive been trying to figure out this issue with my GPO's, What I initially wanted to do was create a simple password policy. I go to the GPMC and edit the Default domain policy and open Comput...
No, doesn't matter where you place files because it will sync to other domain controllers to their local c:\windows\sysvol and will be accessible for clients using \\domainname
You could try to reset the Default Domain Policy using Dcgpofix /target:domain (More information about that here https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix)
Before running the command, please create a report from the current settings and backup the GPO using the Group Policy Management Console. You will have to reconfigure certain settings again!
You could try to reset the Default Domain Policy using Dcgpofix /target:domain (More information about that here https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix)
Before running the command, please create a report from the current settings and backup the GPO using the Group Policy Management Console. You will have to reconfigure certain settings again!
no dice, it gave me an error parameter is incorrect. but distinguished what i wanted to do
- Still an issue,
I have since put it to the back of my plans. But still something i need to get figured out Any update for us?
- I'm from a Dutch company, but you can also report a ticket at a Microsoft partner if you have one nearby?
- Not a problem, would you happen to have a local support agent. Or someone affiliated that we can have come in office an take a look in person.
- I'm out of ideas here myself too at the moment...
- negative, didnt work
- Creating a new GPO at Domain root level, does that give you the password policies folder in that?
- ok yea we have,that service disabled. What would you suggest regarding something like this. I was hoping it would be something fairly simple, like an oversight that I wasnt aware of, but it seems we've tried most most solution.
- It depends... On older versions of Windows Server, it's File Replication Service as default (Switch to DFS how-to here https://www.mcs.support/guide-to-migrate-frs-to-dfsr-using-dfsrmig/ ) WINS is not needed anymore unless you have a very specific reason 🙂
- Ah, ok i see.
I dont understand how policy is being read.
But as far as making changes to the policy; and for it to retain those changes for user, is not.
aswell as the Account policy tab is missing from the security settings .
hmm what do you think about DFS and WINS services stopped, I just came across that. Id assume distributed file system would have a hand in dealing with the sysvol folder? im not sure about WINS service. Yes, it should according to the article, but the command doesn't work on a Windows 2012 R2 server (I tried). Same error like you
- Im not following you? you lost me.
Your saying the regsvr command should function to bring back the missing account policy tab? I only got that error. - For the regsvr32 part, I do see the password policies in the default domain policy
- you get the same error doing it on 2012 R2?
hmm is there anyone that i can possibly speak with remotely. - I get the same when doing this on a Windows 2012 R2 domain controller. The link I posted states that this should work on that. "Applies to Windows 10 - all editions, Windows Server 2012 R2."
Ran the Regsvr and got this error Harm_Veenstra
- If you edit GPOs and the folder PolicyDefinitions is there, it will use the admx templates from there. If the folder is not there, it will use your local admx files on the system you are running Group Policy Management Console on.
I was informed that once those policy definition are place in the "policies" folder it will create a central store in which is will change to retrieving from central store. An we have just one "DC".
Any how many Domain Controllers do you have? Does it show if you connect your Group Policy management console to another DC?
Could you try running regsvr32.exe c:\windows\system32\wsecedit.dll (https://learn.microsoft.com/en-US/troubleshoot/windows-server/group-policy/group-policy-areas-missing)? Perhaps a reboot afterward is required.
- Ok... And what do you mean, you mention "still retrieving from local computers"?
- haha I saw that immediately after sending, It ran the command. the default domain policy is still the same missing account policies and still retrieving from local computers
- There should be a space between Dcgpofix and /target:domain
