Imagine this scenario: You’ve inherited a network with a multitude of changes to the default domain group policies. You don’t know what your predecessor enabled or disabled in these GPOs. All you want to do is get your domain back to the default domain and default domain controllers policies included with Windows Server 2003–and fast. You can then begin the process of creating or modifying group policies to suit your needs.

Here’s the solution: You can use the DCGPOFix command to reset both the default domain policy and the default domain controllers policy to their default settings. The basic syntax for this command is dcgpofix. When you enter this command, you’ll see a warning message reminding you that you’ll lose all settings in these two GPOs. To continue, enter Y.