Best practice is not to modify the default domain policies but if they are ever need to be restored back to the original state the following command can be used.
dcgpofix [/ignoreschema] [/target {Domain | DC | Both}]
/target Domain = Default Domain Policy
/target DC = Default Domain Controller Policy
/ignoreschema if this is not included then dcfixgpo will only work if the domain controller is the same level of OS as the domain schema version.
