Group Policy - Locked myself out

[bigboon]

I set the Group Policy to lockout certain features (eg.
Control Panel, Snap-Ins, etc), and acidentally locked my
own admin account out as well, so now I can't go in and
change anything, including the group policy b/c when I type
gpedit.msc in the RUN command, I get an error message stating:
The Snap-In below, referenced in the document has been
resricted by policy. Contact your adminstrator for details.
Group Policy


HELP!!!
thnx,
(e-mail address removed)

 

[Carey Frisch [MVP]]

Visit http://www.kellys-korner-xp.com/xp_tweaks.htm and scroll way down
to Item No. 296 titled: "Lift MMC/GPEDIT Snap-In Restrictions".

[Courtesy of MS-MVP Kelly Theriot]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------


| I set the Group Policy to lockout certain features (eg.
| Control Panel, Snap-Ins, etc), and acidentally locked my
| own admin account out as well, so now I can't go in and
| change anything, including the group policy b/c when I type
| gpedit.msc in the RUN command, I get an error message stating:
| The Snap-In below, referenced in the document has been
| resricted by policy. Contact your adminstrator for details.
| Group Policy
|
|
| HELP!!!
| thnx,

 

[Guest]

I get an Error Message that reads:
Registry editing has been disabled by your administrator

Unfortunately I made it VERY hard to get behind my own
lockouts to change anything. Have any other suggestions?

 

[Roger Abell]

All you need to do is set a Deny of Full for Administrators on
system32\GroupPolicy folder.
Then, log off and back on as an admin, remove the Deny, and
use your tools to edit and reverse the troublesome policies.

 

[Guest]

1) There is no GroupPolicy folder, only a gpedit Microsoft
Common Console Document.
2) What is a Deny and how do I set one, and remove one?

 

[Roger Abell]

x:Windows\System32\GroupPolicy
directory does exist, relative to your x:\.

When in the NTFS permissions editor you will see
two columns. One is of Grants, the other of Denies