Reset Log on as a service GPO on domain servers

Hi,

The installation of a role on a secondary domain controller caused changes to be made to the Log on as a service Default Domain GPO. Before I detected the problem the changes propagated to most of the servers in the network.

I repaired the GPO in the primary domain with Dcgpofix but most of the server still have the local gpo disabled so I can't add local accounts to it. 

Is there a way to reset this local GPO?

Thanks.

Tony