GPO NEED HELP

[MJC]

Made the stupid mistake of removing Domain Admins and Enterprise Admins from
the ACL of a GPO. Can't edit now, can't take ownership....any way of forcing
DA\EAs to the ACL??

 

[Herb Martin]

Made the stupid mistake of removing Domain Admins and Enterprise Admins
from the ACL of a GPO. Can't edit now, can't take ownership....any way of
forcing DA\EAs to the ACL??

The owner, i.e., the creator, of the GPO should still be able to change
the permissions.

Owners of objects (NTFS etc) can always change permissions even if
they set themselves explicitly to Deny_All (No_Access).

Admins should have the ability to Take Ownership if that fails.