Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2


Restores the default Group Policy objects to their original state (that is, the default state after initial installation).


  • This tool can restore default domain policy and default domain controllers policy to their original state after installation. When you run Dcgpofix, you will lose any changes made to these Group Policy objects.

  • By specifying the /ignoreschema parameter, you can enable Dcgpofix.exe to work with different versions of Active Directory. However, default Group Policy objects might not be restored to their original state. To ensure compatibility, use the version of Dcgpofix.exe that is installed with the current operating system.


dcgpofix [/ignoreschema][/target: {domain | dc | both}]

  • /ignoreschema
    Optional. Ignores the Active Directory schema version number.
  • /target: {domain | dc | both}
    Optional. Specifies whether to rebuild the default domain Group Policy object (GPO), default domain controller GPO, or both. If you do not specify /target, Dcgpofix uses both by default.
  • Dcgpofix.exe is located in the C:\Windows\System32 folder.

  • You must be a domain or enterprise Administrator to use this tool.

  • Dcgpofix checks the Active Directory schema version number to ensure compatibility between the version of Dcgpofix you are using and the Active Directory schema configuration. If the versions are not compatible, Dcgpofix will not run.

  • The following extension settings are maintained in a default Group Policy object: Remote Installation Services (RIS), security settings, and Encrypting File System (EFS).

  • The following extension settings are not maintained or restored in a default Group Policy object: Software Installation, Internet Explorer maintenance, scripts, folder redirection, and administrative templates.

  • The following changes are not maintained or restored in a default Group Policy object: Security settings made by Exchange 2000 Setup, security settings migrated to default Group Policy during an upgrade from Microsoft Windows NT to Windows 2000, and policy object changes made through Systems Management Server (SMS).

  • You can run this tool only on servers running the Microsoft Windows Server 2003 family.

  • If the Policies directory on the sysvol has been deleted, the /target switch will be ignored and both the default domain GPO and default domain controller GPO will be rebuilt. When logged on to a domain controller, the Policies directory on the sysvol can be found at %systemroot%\sysvol\domain\policies.


The following example shows how you can use the Dcgpofix command to restore the default domain Group Policy object:

dcgpofix /target: domain

Formatting legend

Format Meaning


Information that the user must supply


Elements that the user must type exactly as shown

Ellipsis (...)

Parameters that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output

See Also


Command-line reference A-Z
Command shell overview