admin GPO shut out administrators

[Vlaad]

Hi,
I am a consultant for several companies. Each one has
their own 'IT person'
Yesterday, one of these geniuses added a GPO for security
and he ended up adding a GPO that shut out everyone from
the domain administrators accounts. He did this at the
domain level.
Is there any way to recover from this?
As I stated, this was done at the highest end of AD.

Thanks for ANY input,
Vlaad

 

[Kevin Bowersock]

Was this a seperate policy or did he do it in one of the default policies?
Do you know what he set in order to shut out everyone from | the domain
administrators accounts. and when you say "shut out" what is the symptom?


(e-mail address removed)

This posting is provided "AS IS"
with no warranties, and confers no rights
--------------------
| Content-Class: urn:content-classes:message
| From: "Vlaad" <[email protected]>
| Sender: "Vlaad" <[email protected]>
| Subject: admin GPO shut out administrators
| Date: Mon, 19 Jul 2004 23:04:15 -0700
| Lines: 13
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Thread-Index: AcRuH2MDHLK3gG9aTTWlLH0r2HMcnw==
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Newsgroups: microsoft.public.win2000.active_directory
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:81914
| NNTP-Posting-Host: tk2msftngxa12.phx.gbl 10.40.1.164
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| Hi,
| I am a consultant for several companies. Each one has
| their own 'IT person'
| Yesterday, one of these geniuses added a GPO for security
| and he ended up adding a GPO that shut out everyone from
| the domain administrators accounts. He did this at the
| domain level.
| Is there any way to recover from this?
| As I stated, this was done at the highest end of AD.
|
| Thanks for ANY input,
| Vlaad
|
|