Group Policy Disaster - SBS 2000

[Justin Finighan]

I was in the process of creating a very restrictive group
policy for Terminal Services clients - I created a new
group policy (in addition to the Default Domain Policy)
and started editing. However to my dismay, I discovered
that I have edited the wrong group policy, and now my
Administrator account has no access to a:, c:, d:, can
only run a restricted set of programs, and of course is
locked out of all MMC snapins etc etc. I can't run
RecreateDefPol.exe. Can anybody help?

 

[Steven L Umbach]

If you were editing the local Group Policy you should be able to install adminpak
from the install cdrom in the I386 folder and remotely access the Group Security
Policy on the domain controller. If that was not the case there is a registry edit
you can do to disable access to mmc snapins until the next policy refresh which
should give you enough time to disable the settings or unlink the policy. See the KB
below on that. If none of that helps, consider an authoritative restore of Active
Directory that would require a recent backup that includes the System State. I would
save that as a last resort option --- Steve

http://support.microsoft.com/default.aspx?scid=kb;it;263166

 

[Tampabayboy]

I had the same problem as Justin. I had to download this VB script t
unlock regedit.

http://www.dougknox.com/security/scripts_desc/regtools.htm

Then I used the link you posted to unlock the MMC. Saved my life


-
Tampabaybo