Restoring your default domain policy
Description
Every setting you configure in the default domain policy applies to every user and computer account in the domain unless these settings are overwritten by other domain GPOs having higher precedence or by GPOs linked to OUs.
When unintended changes are made to the default domain policy, the changes should be restored immediately to prevent interruptions to all users.
Procedure
- Open RecoveryManager Plus and log in as the administrator.
- Navigate to Active Directory tab → Active Directory → Restore.
- In the Domain drop-down box , select the domain in which you wish to restore the default domain policy.
- Specify the approximate time period within which the object was modified in the Select Backup field and click Search. Once the time period is specified, the number of backups taken during this period is listed. Select the backup in which the object to be restored is present.
- Type the name of the modified object, Default Domain Policy, in the Object Name field.
- Click on the <+/-> icons in the OUs field to select the OU in which the default domain policy is likely to be present.
- In the Object Type field, select the GPO from the drop-down box and hit Search.
- All objects that fit the entered criteria are displayed.
- You can either choose to restore the domain policy to a previous version completely by marking the check-box against the name or selectively restore particular attribute(s) from a version. To selectively restore individual attributes, click on the number in the Number of Property Changes field and select the attributes that you would like to restore.
- Click Restore to complete the default domain policy restoration.
![default-domain-policy](https://www.manageengine.com/in/ad-recovery-manager/images/default-domain-policy.png)