Local Group Policy

[Guest]

Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
XP Pro for patients to use. Well i don't want it joined to our server 2k3
domain just a workgroup and some local GPO's. I didnt think when i was going
through and setting my GPO settings that i was locking my admin account down
as well. But i have i realized it this morning when i remembered i wanted to
modify something. Logged in as admin and can't do much. I can not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS

 

[Leander de Graaf]

Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
XP Pro for patients to use. Well i don't want it joined to our server 2k3
domain just a workgroup and some local GPO's. I didnt think when i was going
through and setting my GPO settings that i was locking my admin account down
as well. But i have i realized it this morning when i remembered i wanted to
modify something. Logged in as admin and can't do much. I can not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS

Sounds like a challenging one there, maybe you should try to disable GPO
functionality in the registry editor:

* Create DWORD DisableGPO if it doesnt exist in location
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
* Give your newly created registry key the value 1 (default value is 0
which means the functionality is enabled)
* Restart computer
* Change/remove troublemaking GPO(s) in question

Hopefully this will help.

 

[Guest]

is there a way to edit registry besides using run command? as it is also
removed from my start menu as admin or a user account

 

[Leander de Graaf]

is there a way to edit registry besides using run command? as it is also
removed from my start menu as admin or a user account

Is the command prompt also disabled? If it is you have succeeded in
locking yourself out. There is a way to run commands with a custom made
shell which i got source code on, but you are probably better off
reinstalling the machine as it sounds like you lost any control of it.

 

[Guest]

oh ya i took away there command propt also mine went away along a/them....

 

[Doug Knox - [MS-MVP]]

Take a look at Bart's PE. This creates a bootable disk, that will run
independently of the hard disk. You can also run Command Prompt, Regedit and
other utilities directly from the GUI.

http://www.nu2.nu/pebuilder/

You may also want to look at Ultimate Boot CD (UBCD)

http://www.ubcd4win.com/

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com

 

[Nepatsfan]

In

Ok, I work for local hospitol in ohio. Yesterday i was
setting up a PC with
XP Pro for patients to use. Well i don't want it joined to
our server 2k3
domain just a workgroup and some local GPO's. I didnt think
when i was going
through and setting my GPO settings that i was locking my
admin account down
as well. But i have i realized it this morning when i
remembered i wanted to
modify something. Logged in as admin and can't do much. I can
not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the
admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS

Once you get this sorted out you might want to consider using
this program from Microsoft instead of the local security
policy.

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Good luck

Nepatsfan