Group Policy Pains

[TMX]

Hi, I have a workgroup server at work, a group policy has been applied
to this machine which has somehow locked down the administrator
account from doing anything. Cant even show hidden files. I tried
going in as the local admin, but the local policy is also locked down,
pehaps by the group policy overiding it? Can anyone help me this
problem as its casuing havok here. Thanks

Tom

 

[Florian Frommherz]

Howdie Tom!

Hi, I have a workgroup server at work, a group policy has been applied
to this machine which has somehow locked down the administrator
account from doing anything. Cant even show hidden files. I tried
going in as the local admin, but the local policy is also locked down,
pehaps by the group policy overiding it? Can anyone help me this
problem as its casuing havok here. Thanks

Is it a Group Policy that came from the "domain" or a local Group Policy
applied via GPEDIT.msc?

As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.

cheers,

Florian

 

[Florian Frommherz]

Howdie!

As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.

Also keep in mind that all local Group Policies that you defined will be
deleted as well. So you might want to backup those registry.pol files.

cheers,

Florian

 

[TMX]

Hi, thanks for your help,

Is it a Group Policy that came from the "domain" or a local Group Policy
applied via GPEDIT.msc?

In answer to your questions, Local Group Policy.

As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.

Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?

Thanks

Tom

 

[Florian Frommherz]

Howdie!

Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?

Okay - what about remoting? You have access to the c$-share? Any kind of
bootdisk that would enable you to delete this file?

cheers,

Florian

 

[TMX]

Okay - what about remoting? You have access to the c$-share? Any kind of

bootdisk that would enable you to delete this file?

I can remote to the machine, but i cant use any kind of boot disk
because its off site? Sorry to make things worse

Tom

 

[Florian Frommherz]

Howdie!

I can remote to the machine, but i cant use any kind of boot disk
because its off site? Sorry to make things worse

Apart from the solution that you could delete those registry.pol files,
I have no idea what you can do else. Maybe there's someone capable of
booting the machine at the remote site and solve the problem from there,
but I think you're pretty much out of luck from remote...

cheers,

Florian

 

[Norbert Fehlauer [MVP]]

TMX wrote:
Hi,

Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?

cmd and delete? Or if cmd is locked to try command.

Bye
Norbert