Does anyone know of a way to revert the default domain policy to its original default settings, short of a full reformat and reinstall (and preferably short of removing that role from the server and reinstalling it)?

Almighty Lord of Laziness...

since u r lazy... if it for home use or is it production enviorment? single dc config or multiple dc's configuration?

if 1 u can just uninstall ad (dcpromo) and run it again to get back to square one.

there is a tool from ms to reset the default domain and domain controller policy

http://www.winnetmag.com/windowsnt20002003...3faq_41878.html

I know a tool exists at micosofrt.com for windows 2000 servers to do this. can't remember location but did use it and it doesn't reset all options for some reason, unless i used it wrong which is possible.

This might help though =>

http://support.microsoft.com/default.aspx?...kb;en-us;842252

Many thanks to all three of you. I'll try those things at once.

@Br4tt3:

We have a dual DC config here, and "here" refers to a development environment (which will eventually become a production environment if I get all the bugs fixed) at my university.

Okay, this worked for the servers, but I have another question. Can this be done in similar fashion to the local policy on an XP machine?

Again, many thanks to all for your solutions.