active directory gpo repair tool windows 2008

If you run into problems, run gpresult /H GPReport.html from a Command Prompt window. The old group policy is gone.īasically, how this works is it (since it gets no policy when you run the command), it applies an empty policy, which effectively removes the stuck policy once and for all. Type gpupdate /force /boot and press Enter. Go to Start (open the Start menu) > Run (open the Run app), and type 'cmd' (without the quotes) and press Enter. If it is NOT dis-joined from the domain via the OS, then this will NOT work.Īfter the machine is dis-joined from the DC (Domain Controller), login using the local (machine) administrator account. This solution is dependent upon the machine-in-question being dis-joined from the domain. Hopefully this answer will get around to enough sysadmins to fix that.īy the way, this works on all versions of Windows.

Unfortunately, it's not common knowledge. Fortunately, there is a rather ingenious way to fix this problem. We believe that there is something on the client side that needs to be deleted/reset so that the client can behave normally. In the gpresult /h output, we see that Group Policy Infrastructure component has failed due to the error 'A directory service error has occurred.' It's only the combination of the old forest and the specific Windows 8 image.

Also, the problem doesn't happen when joining the Windows 8 image to a new forest. Other domain members (not built from said Windows 8 image) are fine.

There were also some (undocumented) Group Policy changes, but this should be irrelevant given that the error still happens when the domain member is in an OU with no GPOs applied to it. These domain member have recently been moved to a new Organisational Unit, but moving them back is not possible because the OU structure has changed significantly. We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy.

Active directory gpo repair tool windows 2008