GPO ISSUE NEED HELP!!

M

MJC

Made the stupid mistake of removing Domain Admins and Enterprise Admins from
the ACL of a GPO. Can't edit now, can't take ownership....any way of forcing
DA\EAs to the ACL??
 
D

Darren Mar-Elia

I'm assuming you're trying to edit it from GPMC? What you'll need to do is
take ownership as a domain administrator of the GPMC object using ADUC or
ADSIEdit. Then you should be able to go in and use GPMC to modify the
permissions back to the way you need them. You'll need to take ownership of
the GUID-named container corresponding to your GPO under Cn=Policies,
CN=System. Hopefully you know the GUID :)

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting
Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

GPO NEED HELP 1
Help! Can't Access GPO 1
New GPO are failing 4
accidentally removed domain admin rights in security of a GPO 2
Copy GPO's 3
Access Denied when editing GPO 5
Is it possible to prevent ownership replacing in a forest? 9
Default Domain Policy GPO 3

Top