Remove GPO setting Help!!

[Guest]

A GPO setting was applied to a laptop at a remote location. The user can not
longer run anything on their computer. Any ideas how I can get rid of the
setting?

The GPO that was mistakingly set was "Administrative Templates\System\Run
only allowed Windows applications" The registry location is
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun"
I can have the user login as another acount and VPN in to our network but
they can no longer login as themself as the computer will not allow them to
run anything. Help!!

 

[Lanwench [MVP - Exchange]]

In

A GPO setting was applied to a laptop at a remote location. The user
can not longer run anything on their computer. Any ideas how I can
get rid of the setting?

The GPO that was mistakingly set was "Administrative
Templates\System\Run only allowed Windows applications" The registry
location is
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun"
I can have the user login as another acount and VPN in to our network
but they can no longer login as themself as the computer will not
allow them to run anything. Help!!

Could you have them bring/send the laptop in to your office?

 

[Guest]

That is my last resort, or to send them a HD. Was hoping to resolve this
before I had to do that. TT

 

[Lanwench [MVP - Exchange]]

In

That is my last resort, or to send them a HD. Was hoping to resolve
this before I had to do that. TT

Personally, I'd think having them send in the laptop would be the
easiest/fastest course.

 

[Steven L Umbach]

Where was the policy applied - locally or domain/OU level?? If that registry
key can be deleted on their computer somehow then it should clear that
setting until the Group Policy is changed/forced refreshed again. If it is a
domain/OU GPO setting then you could correct that setting and it should
refresh over the VPN at the next GP refresh interval which may be up to a
couple hours. You might also be able to remotely delete that registry key
while it is connected via the VPN if you have SMB connectivity to that
computer. --- Steve

 

[Guest]

The policy is a domain/OU GPO. Unfortunately it is also one that tells the
computer not to run any .exe file. I had the user login using another test
account that happened to be on the computer (thank goodness) and had them VPN
in. I was then able to load the users registry and delete the offending key.
After a reboot is now able to get back to work ;o]. Thanks for the help.
Teresa

 

[Steven L Umbach]

Sounds good. Thanks for letting me know what worked. I assume you removed
the offending setting in Group Policy otherwise it could eventually refresh
and apply to that user again. --- Steve

The policy is a domain/OU GPO. Unfortunately it is also one that tells the
computer not to run any .exe file. I had the user login using another test
account that happened to be on the computer (thank goodness) and had them
VPN
in. I was then able to load the users registry and delete the offending
key.
After a reboot is now able to get back to work ;o]. Thanks for the help.
Teresa

Where was the policy applied - locally or domain/OU level?? If that
registry
key can be deleted on their computer somehow then it should clear that
setting until the Group Policy is changed/forced refreshed again. If it
is a
domain/OU GPO setting then you could correct that setting and it should
refresh over the VPN at the next GP refresh interval which may be up to a
couple hours. You might also be able to remotely delete that registry
key
while it is connected via the VPN if you have SMB connectivity to that
computer. --- Steve