JSI Tip 7962. The Dcgpofix tool does not restore security settings in the Default Domain Controller Policy to their original state.

I described the Dcgpofix tool in tip 6493.

Microsoft Knowledge Base Article 833783 Explains that the Dcgpofix tool does not restore security settings in the Default Domain Controller Policy to the same state that they were in after successfully completing Dcpromo and that it is best to use this tool only in disaster recovery...