If object protection is set up to protect either the Default Domain Controller Policy or the Default Domain Policy on either a root domain or any child domain, all GPO's (with the same name and GUID) will be locked for every child domain and / or root domain.
Since we use the GUID of a GPO for protection, this is a problem with these two policies (Default Domain Controller Policy and Default Domain Policy) since they always get created with the same GUID.
Defect ID: TF00186348 has been logged against this issue.
WORKAROUND
STATUS
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy