to reset your Default Domain Policy and/or Default Domain Controllers Policy GPO to their default settings, perform the following steps:
- Log on as a Domain Administrator to a Domain Controller.
- Open an elevated command prompt.
- Enter the parameter to reset:
dcgpofix /target:Domainto reset the Domain GPO.dcgpofix /target:DCto reset the Default DC GPO.dcgpofix /target:bothto reset both the Domain and Default DC GPOs.
- After you enter the appropriate command in Step 3, enter Y to both prompts.
- Close the command window.
For additional information on the dcgpofix command, refer to the Microsoft Technet website.
Though not as widespread, problems can occur if you have edited a machine’s Local Security Policy. This policy can also be reset to its default settings with the following steps:
- Log into an account with local administrative rights on the machine in question.
- Click Start, Run, then enter “
cmd” in the prompt, then <Enter> to start a command session. - Enter
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verboseto reset Local Security Policy.
Source: Microsoft Tech