Hi All, I had the unfortunate experience of having to do an authoriative domain restore this morning. Everything went ok - except bloody Veritas Backup Exec playing up a bit I am seeing only one error showing when my DC's apply the default domain contollers policy it is an error 1043 followed by 1096 Windows cannot access the registry policy file, <domain>\sysvol\<domain>\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\Machine\registry.pol. (Access is denied. ). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. anyone got any ideas in how to correct?? Thanks Robert