Warning - dcgpofix

[Jammsher]

If you are reading Jeremy's book and get to the part about "easily" fixing your Default Domain Controller Policy and Default Domain Policy be VERY careful when using the DCGPOFIX command. It brought down our Exchange Server 2007 because of the reset permissions. Luckily we got it back up by resetting one permission... Finding that permission was another issue!

[ronanian]

What was the permission that you needed to reset?

[Jammsher]

You have to make sure that Domain\Exchange Enterprise Servers is granted the right to "Manage Auditing and Security Log" under the Default Domain Policy >> Policies >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment