Reseting administrator group

H

Hedge

We had a slight problem with a GPO that was to restrict
the administrators group for selected servers.
Unfortunately, the "apply to" field was not cleared for
authenticated users in the security tab. As such, all
computers in the domain, including the domain
controllers, had their local administrators group reset.

When we rolled the GPO back, all of our XP machines and
WIndows 2003 servers rolled back their previous
administrator group settings (even the custom 'adds')

Windows 2000 Server machines did not roll back. Does
anyone know of a way to roll back the local administrator
group settings to the state they were prior to the GPO
restricted group setting?
 
B

Brian Desmond [MVP]

You're SOL, as when a GPO setting goes from defined to not defined, the
machine will retain the defined value until a new setting is pushed down.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top