diff --git a/ansible/roles/win_domain_controller/files/serverhardening0.2.ps1 b/ansible/roles/win_domain_controller/files/serverhardening0.2.ps1
index b4a523a..ede28f2 100644
--- a/ansible/roles/win_domain_controller/files/serverhardening0.2.ps1
+++ b/ansible/roles/win_domain_controller/files/serverhardening0.2.ps1
@@ -216,15 +216,11 @@ Set-SystemAuditPolicy -Policy 'Sensitive Privilege Use' -Value SuccessAndFailure
 Set-SystemAuditPolicy -Policy 'IPsec Driver' -Value SuccessAndFailure -UseAuditpol
 Set-SystemAuditPolicy -Policy 'Security System Extension' -Value Success -UseAuditpol
 
-# 3 LINES BELOW DONT WORK NO GPO CALLED "Default Domain Controller Policy"
-
-#DC only
-New-GPO -Name "Default Domain Controller Policy" -comment "Default policy for domain controllers"
-Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "LdapEnforceChannelBinding" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
-Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "LDAPServerIntegrity" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
-Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "" -key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters -> NullSessionPipes" -Value LSARPC, NETLOGON, SAMR -Type MultiString
+Set-GPRegistryValue -Name "Default Domain Controllers Policy" -ValueName "LdapEnforceChannelBinding" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
+Set-GPRegistryValue -Name "Default Domain Controllers Policy" -ValueName "LDAPServerIntegrity" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
+Set-GPRegistryValue -Name "Default Domain Controllers Policy" -ValueName "" -key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters -> NullSessionPipes" -Value LSARPC, NETLOGON, SAMR -Type MultiString
 $DCOU = (Get-ADOrganizationalUnit -Identity "OU=Domain Controllers,$DomainOU").DistinguishedName
-New-GPLink -Name "Default Domain Controller Policy" -Target $DCOU
+New-GPLink -Name "Default Domain Controllers Policy" -Target $DCOU
 
 $domainid = $DomainInfo.Name
 
@@ -240,4 +236,6 @@ set-addefaultDomainPolicy -identity $domainid -complexityEnabled $true -lockoutd
 #$domainadminid2 = $domainid + "_" + "administrator" 
 #get-aduser -identity 'Administrator' | Rename-AdObject -NewName $domainadminid2
 $domainguestid2 = $domainid + "_" + "guest" 
-get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2
\ No newline at end of file
+get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2
+
+Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt'
\ No newline at end of file