accidentally removed domain admin rights in security of a GPO

G

Guest

I accidentally removed all domain admins from the security property of a GPO.
Now this GPO is read-only from all and can not be modified. Any ideas how
to fix this? There is a security group called System that has full admin
rights tp this GPO. How can add myself to this group?
 
L

lforbes

TJ16 said:
I accidentally removed all domain admins from the security
property of a GPO.
Now this GPO is read-only from all and can not be modified.
Any ideas how
to fix this? There is a security group called System that has
full admin
rights tp this GPO. How can add myself to this group?

Hi,

I am not sitting in front of my DC so I am not sure if this is
possible, however CAN you get to an Ownership tab and take ownership?
That is the only way I know to recover from something like this.

The SYSTEM account is the local computer account. You can’t add
yourself to it.

Cheers,

Lara
 
G

Guest

Hi
you can obtain perrmisions via Active Directory.

first, check , what GUID of the GPO in property TAB .
open Active directory users and computers, make sure that advanced options
checked in view menu.
go down to Systam -> Policies. find your GUID of GPO and put perrmisions for
this object in security tab. wait some seconds and check if it works on GPO
properties

sorry for poor english....
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top