Information Technology Reference
In-Depth Information
NOTE
MIGRATION TABLES
Migration Tables are XML files with a .migtable extension. You can create them in your
favorite XML editor, but the easiest way is to initially create them in the Migration Table
Wizard and then do any customization with your favorite ASCII editor.
It is generally not recommended to edit or modify the Default Domain Policy or the Default
Domain Controller Policy, but if you ever need to restore them back to their original state,
you can do so with the Dcgpofix.exe command. The syntax for this command is the following:
Dcgpofix [/ignoreschema] [/target: {Domain | DC | Both }
Without the /ignoreschema switch, dcgpofix works only if the domain controller is the
same level of operating system as the domain schema version.
IMPORTANT
DCGPOFIX IS POWERFUL
Dcgpofix is for disaster recovery scenarios only. You should use the steps shown in the
previous section, “Backing up and restoring GPOs,” before you reset the default policies.
EXAM TIP
Dcgpofix is a simple utility, but a powerful and important one. Given that this subobjective
is explicitly called out in the objective domain for this exam, you can expect that there will
be at least one question about resetting the default GpOs for a domain.
By default, members of the Domain Admins and Enterprise Admins groups have full permis-
sions to manage Group Policy. However, you can delegate permissions on specific GPOs or
OUs to non-administrators to manage. The permissions you can delegate are these:
■
Permissions on a GPO
■
Permissions to link a GPO
■
Permissions to generate Group Policy modeling data
■
Permissions to generate Group Policy results
■
Permissions on a WMI filter
All these permissions are delegated in the GPMC. The steps are similar for each set of
permissions, so start with granting delegated permissions on a GPO:
