Avoiding Errors in the Basicdc.inf Security Template

Learn how to avoid and fix an error in the Basic Domain Controller security template.

John Howie

July 29, 2001

1 Min Read
ITPro Today logo in a gray background | ITPro Today


Because of a problem with the Basic Domain Controller security template (basicdc.inf), you might experience an error if you attempt to import either the template or a customized template derived from it. If an error occurs, a dialog box appears stating that the data is invalid and the import failed. This error occurs because three environment variables (i.e., DSDIT, DSLOG, and SYSLOG) aren't set. For more information about the problems that these missing environment variables can cause and for workarounds, see the Microsoft articles

  • "Error Returned Importing the BASICDC Security Template in Security Configuration Editor" (http://support.microsoft.com/support/kb/articles/q250/4/54.asp)

  • "Error Messages After Importing Basicdc.inf into Group Policy" (http://support.microsoft.com/support/kb/articles/q256/0/00.asp)

  • "Gpresult Does Not Enumerate the Resultant Computer Security Policy" (http://support.microsoft.com/support/kb/articles/q258/5/95.asp)

  • "How to Set and Maintain %DSDIT%, %DSLOG%, and %SYSVOL% Environment Variables" (http://support.microsoft.com/support/kb/articles/q259/3/95.asp)

In most cases, running the code in Listing A from the command line and restarting Microsoft Management Console (MMC) solves the problem.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like