You may find yourself in a situation where you need to restore the default domain policy or the default domain controllers policy to their original configurations. Thankfully – there is a tool for this – it is the aptly named dcgpofix.exe command line tool. This tools offers the following options:

• /ignoreschema- this permits the command to run regardless of the AD scheme version in use
• /target – permits you to specify exactly what object you want to restore
• /? – permits the display of help on the command