When I try and edit the default domain controller policy from Directory Management MMC the local policy is shown, why?

John Savill

March 4, 1999

1 Min Read
ITPro Today logo

A. Normally to edit the default domain controller policy you would

  1. Start the Directory Management MMC (Start - Programs - Administrative Tools- Directory Management)

  2. Select the domain and right click on "Domain Controllers" andselect Properties

  3. Select the 'Group Policy' tab

  4. The policies in effect will be shown, normally 'Default Domain ControllersPolicy". If you select it and click Edit the Group Policy editor MMCshould start with "Default Domain Controllers Policy" as its root.You can then make changes

If when Group Policy Editor starts, you instead have "LocalPolicy" at the root the likely cause is the MMC start setting has beencorrupted and this is usually caused by the installation of Office 2000. Torepair perform the following:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_CLASSES_ROOTMSCFileShellOpenCommand

  3. Double click on (Default)

  4. If the line reads
    D:WINNTSystem32MMC.EXE "%1"
    (your NT installation location may be different) Add %* to the end, e.g.
    D:WINNTSystem32MMC.EXE "%1" %*

  5. Click OK

The policy editing should now work as expected. The basic problem is MMC wasnot being passed all the parameters and thus opening the default "Localpolicy".

About the Author(s)

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like