Q. How can I repair Windows 2000 Server's default Group Policy Objects (GPOs)?

A. You can use Microsoft's RecreateDefpol utility to repair the Default Domain Policy and Default Domain Controllers Policy. (RecreateDefpol works only on Win2K Server systems.) You can download recreatedefpol.exe at Microsoft Web site. On Windows Server 2003 systems, use the Dcgpofix tool to restore default GPOs to their original state, as I explain in the FAQ "How can I restore the contents of the Default Domain and Default Domain Controller (DC) Group Policy Objects (GPOs)?"