A. Normally to edit the default domain controller policy you would
- Start the Directory Management MMC (Start - Programs - Administrative Tools - Directory Management)
- Select the domain and right click on "Domain Controllers" and select Properties
- Select the 'Group Policy' tab
- The policies in effect will be shown, normally 'Default Domain Controllers Policy". If you select it and click Edit the Group Policy editor MMC should start with "Default Domain Controllers Policy" as its root. You can then make changes
If when Group Policy Editor starts, you instead have "Local Policy" at the root the likely cause is the MMC start setting has been corrupted and this is usually caused by the installation of Office 2000. To repair perform the following:
- Start the registry editor (regedit.exe)
- Move to HKEY_CLASSES_ROOT\MSCFile\Shell\Open\Command
- Double click on (Default)
- If the line reads
(your NT installation location may be different) Add %* to the end, e.g.
D:\WINNT\System32\MMC.EXE "%1" %*
- Click OK
The policy editing should now work as expected. The basic problem is MMC was not being passed all the parameters and thus opening the default "Local policy".