Avoiding Errors in the Basicdc.inf Security Template

Because of a problem with the Basic Domain Controller security template (basicdc.inf), you might experience an error if you attempt to import either the template or a customized template derived from it. If an error occurs, a dialog box appears stating that the data is invalid and the import failed. This error occurs because three environment variables (i.e., DSDIT, DSLOG, and SYSLOG) aren't set. For more information about the problems that these missing environment variables can cause and for workarounds, see the Microsoft articles

• "Error Returned Importing the BASICDC Security Template in Security Configuration Editor" (http://support.microsoft.com/support/kb/articles/q250/4/54.asp)
• "Error Messages After Importing Basicdc.inf into Group Policy" (http://support.microsoft.com/support/kb/articles/q256/0/00.asp)
• "Gpresult Does Not Enumerate the Resultant Computer Security Policy" (http://support.microsoft.com/support/kb/articles/q258/5/95.asp)
• "How to Set and Maintain %DSDIT%, %DSLOG%, and %SYSVOL% Environment Variables" (http://support.microsoft.com/support/kb/articles/q259/3/95.asp)

In most cases, running the code in Listing A from the command line and restarting Microsoft Management Console (MMC) solves the problem.