When you try to import the Basicdc.inf or the Defltdc.inf security template to a security settings database by using the Security Configuration and Analysis snap-in, you receive the following error message:

Back to the top

This problem may occur if the following environment variables that are referenced in the Basicdc.inf and Defltdc.inf security templates are not set:

•	%DSDIT%
•	%DSLOG%
•	%SYSVOL%

Back to the top

To resolve this problem, follow these steps:

1.	At a command prompt, type the following, and then press ENTER: net share sysvol
2.	Make a note of the Sysvol folder path.
3.	At the command prompt, type regedit, and then press ENTER. Registry Editor opens.
4.	Locate and then click the following subkey: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters Make a note of the Database log files path and the DSA Working Directory path.
5.	Quit Registry Editor.
6.	At the command prompt, type the following, where Path is the path that you noted in step 2 without the ending “\sysvol”, and then press ENTER: set SYSVOL=Path
7.	At the command prompt, type the following, where Path is the path that you noted in step 4 for Database log files, and then press ENTER: set DSLOG=Path
8.	At the command prompt, type the following, where Path is the path that you noted in step 4 for DSA Working Directory, and then press ENTER: set DSDIT=Path
9.	At the command prompt, type mmc, and then press ENTER. Microsoft Management Console (MMC) opens.
10.	On the File menu, click Add/Remove Snap-in.
11.	Click Add.
12.	Under Available Snap-ins, click Security Configuration and Analysis.
13.	Click Add, and then click Close.

You can now import the Basicdc.inf and the Defltdc.inf security templates by using the Security Configuration and Analysis snap-in.

Back to the top

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

Back to the top