dcgpofix
Recreates the default Group Policy Objects (GPOs) for a domain. Windows commands reference
On Windows File dcgpofix.exe
Windows
Recreates the default Group Policy Objects (GPOs) for a domain. To get to the Group Policy Management Console (GPMC), you must install Group Policy Management as a feature through Server Manager. Dcgpofix.exe is included with Windows Server and is located in the C:\Windows\system32\ folder. Dcgpofix.exe restores only the policy settings that are contained in the Default Domain Policy GPO and Default Domain Controller GPO. Dcgpofix.exe doesn't restore other GPOs that administrators create, it's only intended for disaster recovery of the default GPOs. IMPORTANT: As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. Additionally, you should configure the Default Domain Controllers Policy GPO only to set user rights and audit policies.
dcgpofix [/ignoreschema] [/target: {domain | dc | both}] [/?]To manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy, while ignoring the Active Directory schema version, type
dcgpofix /ignoreschema /target:domainIdentify/ignoreschemaIgnores the version of the Active Directory schema when you run this command. Windows commands referenceTo configure the Default Domain Controllers Policy GPO only to set user rights and audit policies, while ignoring the Active Directory schema version, type
dcgpofix /ignoreschema /target:dcIdentify/ignoreschemaIgnores the version of the Active Directory schema when you run this command. Windows commands reference/ignoreschemaIgnores the version of the Active Directory schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped./?Displays Help at the command prompt.