Edit Default Domain Controllers Policy

Tom Jedusor 0 Reputation points

I'm trying to edit the Default Domain Controllers Policy but I can't. I've tried to look if it is a permission problem but my user is in Administrators group.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,996 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 14,966 Reputation points Microsoft Vendor

    Hello Tom Jedusor,

    Thank you for posting in Q&A forum.

    To better understand your question, please confirm the information below so that we can help you better.

    1.What error message did you received when you edit Default Domain Controllers Policy?

    2.How many DCs are there in your domain?

    Meanwhile, you can try to troubleshoot the issue as below.

    1.You can try to edit Default Domain Controllers Policy on other DC if you have and check if it helps.

    2.You can try to edit Default Domain Controllers Policy using other administrator account (sign in DC using built-in Domain Administrator account or member in Domain Admins) to see if you can.

    3.You can try to check if the DC works fine by running dcdiag /v to check the health of this DC.

    4.If you have more than one DC, you can check AD replication between all DCs by running commands on PDC.
    repadmin /showrepl
    repadmin /replsum

    5.Check if SYSVOL replication is OK.

    Hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments