How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?


Assuming you're talking about the Default Domain Policy or the Default Domain Controllers Policy You can either compare them to a non-modified GPO in another domain or you can run DCGPOFIX.



I don't understand what you're saying with your comment. Look at this image. This is from/in the DD GPO:

enter image description here

  • No, I am referring to the Client (Respond Only), Secure Server (Require Security) and Server (Request Security) policy. I don't think they have anything to do with the DD GPO & DDC GPO. – Corey Apr 15 '16 at 0:11
  • See my edit.... – joeqwerty Apr 15 '16 at 0:29
  • As I understand it, the policy definitions are global across the domain, and not specific to any one GPO. Only the assignments can vary from one GPO to the next. I removed all the policies from a GPO that I had created and now they are not listed/available in any other policy. – Corey Apr 15 '16 at 10:36

As far as I have found, there is no built-in reset option. What I ended up doing was exporting the default policies from a newly created Active Directory to a file, then importing them into my existing Active Directory.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.