I've had to restore my Default Domain Policy and Default Domain Controller policy because somehow they disappeared. I'm using Sophos Enterprise Manager to automatically update all computers on the network. Everything is working as normal but I can't update the 2 Domain Controllers on the system. It says there is a log on failure. The logon being used is a member of Domain Admins and Admins, plus I've changed the Sophos update services to log on as a network admin instead of localhost but it still doesn't work. Does anyone have any ideas as to what is stopping it - maybe a setting in the default domain controllers policy?