Help! Can't Access GPO

[tony]

Hi,
I recently setup a group policy on a win 2000 adv.
server domain controller. Yesterday I was setting up
filters to filter the domain admins, local administrators
and enterprise admins from the policies. I followed the
document and denied Read on the GPO (Properties). As a
Domain Admin, Now I can't even open the Domain Group
Policy MSC. It denies me permission to open the object.
How do I getback and give me permission again so that I
can open the GPO and edit it. I'm in the
domain/Enterprise admin group.

HELP!

tony

 

[Buz [MSFT]]

Hello Tony,

Try this, on a Domain Controller go to the

Winnt\Sysvol\Domainname\Sysvol\Policies\31b... Directory.

The 31b.. GUID is the default domain policy, you should have it unless you
deleted and recreated the policy at some point.

Right click the folder, go to properties, security, and advanced see if you
can take ownership of it. If you can see if you can recreate the NTFS
permissions and check the box after pressing advanced so it reset
permissions on all subcontainers. (if you get a message about inherited
permissions press the copy button at the prompt)

Let me know if that worked.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.