Administrators cannot delete the 'Default Domain Policy' or the 'Default Domain Controller Policy'. (NETIQKB17731)

  • 7717731
  • 02-Feb-2007
  • 05-Sep-2007

Resolution

fact
NetIQ Group Policy Administrator 3.0

fact
NetIQ Group Policy Administrator 4.x

fact
NetIQ Group Policy Administrator 5.0

symptom
Administrators cannot delete the 'Default Domain Policy' or the 'Default Domain Controller Policy'.

cause
Native Windows does not allow the ability to delete either the Default Domain Policy or the Default Domain Controller Policy.  These GPO's are unique and are vital to a correctly functioning environment.  For example, the Default Domain Policy is the ONLY GPO where you can set security settings dealing with Password policy, Account lockout policy or kerberos policy.

fix
This is the correct behavior. 

Additional Information

Formerly known as NETIQKB17731