JSI Tip 10007. When you attempt to delete the default domain policy, or the default domain controller policy, on a Windows Server, you receive 'Failed to delete Group Policy Object'?

When you use DSA.msc, the Active Directory Users and Computers snap-in, to delete the default domain policy, or the default domain controller policy, on a Windows Server, you receive:

Failed to delete Group Policy Object <Group Policy object name>.You may not have appropriate rights.

If you use ADSIEdit.msc to delete:

• Default Domain Policy:             CN=\{31B2F340-016D-11D2-945F-00C04FB984F9\},CN=Policies,CN=System,DC=Domain,DC=com

• Default Domain Controllers Policy: CN=\{6AC1786C-016F-11D2-945F-00C04fB984F9\},CN=Policies,CN=System,DC=Domain,DC=com

You receive:

The requested delete operation could not be performed

This behavior occurs because you cannot delete the default domain policy, or the default domain controller policy.