dcgpofix [/ignoreschema][/target: {domain | dc | both}]

/ignoreschema

Optional. Ignores the Active Directory schema version number.

/target: {domain | dc | both}

Optional. Specifies whether to rebuild the default domain Group Policy object (GPO), default domain controller GPO, or both. If you do not specify /target, Dcgpofix uses both by default.

• Dcgpofix.exe is located in the C:\Windows\System32 folder.
  
  
• You must be a domain or enterprise Administrator to use this tool.
  
  
• Dcgpofix checks the Active Directory schema version number to ensure compatibility between the version of Dcgpofix you are using and the Active Directory schema configuration. If the versions are not compatible, Dcgpofix will not run.
  
  
• The following extension settings are maintained in a default Group Policy object: Remote Installation Services (RIS), security settings, and Encrypting File System (EFS).
  
  
• The following extension settings are not maintained or restored in a default Group Policy object: Software Installation, Internet Explorer maintenance, scripts, folder redirection, and administrative templates.
  
  
• The following changes are not maintained or restored in a default Group Policy object: Security settings made by Exchange 2000 Setup, security settings migrated to default Group Policy during an upgrade from Microsoft Windows NT to Windows 2000, and policy object changes made through Systems Management Server (SMS).
  
  
• You can run this tool only on servers running the Microsoft Windows Server 2003 family.
  
  
• If the Policies directory on the sysvol has been deleted, the /target switch will be ignored and both the default domain GPO and default domain controller GPO will be rebuilt. When logged on to a domain controller, the Policies directory on the sysvol can be found at %systemroot%\sysvol\domain\policies.
  
  

The following example shows how you can use the Dcgpofix command to restore the default domain Group Policy object:

dcgpofix /target: domain