Hi All-

I have a corrupted domain gpo and so i ran dcgpofix as a method of disaster
recovery (i don't have a backup - that's a different story).

I ran the following command:

dcgpofix /ignoreschema /target:domain

I get an error that says the following:

Unable to read EFS certificate from registry.pol

Does anyone have any ideas on what to do next?

I'm seeing that the domain policy is no longer being applied to any of the
computers in the domain.

Thanks.

Re: dcgpofix doesn't work by Meinolf

Meinolf
Wed May 07 12:41:04 PDT 2008

Hello Jeff,

Why do you think it is corrupted?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Unable to read EFS certificate from registry.pol
>



Re: dcgpofix doesn't work by JeffGross

JeffGross
Wed May 07 12:56:19 PDT 2008

A few months ago I went to edit the gpo and it said "Failed to open the Group
Policy Object. You may not have appropriate rights". I researched the issue
on the knowledge base, and tried to follow some steps that they had for
situations like this but nothing worked. All of the other GPOs I can edit
except for this one. I read more and all conclusions that I found said that
if the steps MS provided didn't work, then the gpo is most likely corrupted.
Hence I went to using dcgpofix which should have replaced it with a new one.

Jeff

"Meinolf Weber" wrote:

> Hello Jeff,
>
> Why do you think it is corrupted?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Unable to read EFS certificate from registry.pol
> >
>
>
>

Re: dcgpofix doesn't work by JeffGross

JeffGross
Wed May 07 13:52:01 PDT 2008

There is only one NIC on the server I tried to run the command so there is
nothing there to change. I did go to another server with 2 NICs and changed
the binding order as you suggested, but it failed again with the same error.

Jeff

"Meinolf Weber" wrote:

> Hello Jeff,
>
> Do you have more then one NIC:
> Change the binding order of your NIC's in your advance settings under network
> neighborhood.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > A few months ago I went to edit the gpo and it said "Failed to open
> > the Group Policy Object. You may not have appropriate rights". I
> > researched the issue on the knowledge base, and tried to follow some
> > steps that they had for situations like this but nothing worked. All
> > of the other GPOs I can edit except for this one. I read more and all
> > conclusions that I found said that if the steps MS provided didn't
> > work, then the gpo is most likely corrupted. Hence I went to using
> > dcgpofix which should have replaced it with a new one.
> >
> > Jeff
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello Jeff,
> >>
> >> Why do you think it is corrupted?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Unable to read EFS certificate from registry.pol
> >>>
>
>
>