Group Policy Disaster - SBS 2000

J

Justin Finighan

I was in the process of creating a very restrictive group
policy for Terminal Services clients - I created a new
group policy (in addition to the Default Domain Policy)
and started editing. However to my dismay, I discovered
that I have edited the wrong group policy, and now my
Administrator account has no access to a:, c:, d:, can
only run a restricted set of programs, and of course is
locked out of all MMC snapins etc etc. I can't run
RecreateDefPol.exe. Can anybody help?
 
S

Steven L Umbach

If you were editing the local Group Policy you should be able to install adminpak
from the install cdrom in the I386 folder and remotely access the Group Security
Policy on the domain controller. If that was not the case there is a registry edit
you can do to disable access to mmc snapins until the next policy refresh which
should give you enough time to disable the settings or unlink the policy. See the KB
below on that. If none of that helps, consider an authoritative restore of Active
Directory that would require a recent backup that includes the System State. I would
save that as a last resort option --- Steve

http://support.microsoft.com/default.aspx?scid=kb;it;263166
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top