URGENT! Denied Logins, need to reset over Slow Link

[DanO]

Ok, so I really FUBAR'd. Thanks for any help in
advance.

I was trying to configure Group Policy to deny local
logins to a couple machines in an open area. I forgot to
remove Apply to Authenticated Users, so nobody could
login to their machines except for the authorized group
and admins. No problem. Reset the GP and everything is
ok. On the locan network. Remote salespeople updated
their group policy thru VPN last night, then logged off.
Today, they can't login because they still have the old
GP. I can't login as admin because their machines can't
see a DC. I can logon locally to their machine, but I
can't refresh the domain policy by doing that. Or can
I? Please help!

Thanks!
Dan

 

[Vsevolod Titov [MSFT]]

Dan, you were saying:

GP. I can't login as admin because their machines can't
see a DC. I can logon locally to their machine, but I

If machine doesn't see a DC, then policy will not be applied. You have to
restore connectivity to domain. When connection is restored, you can either
wait for 2 hour (which is max time policy refresh happens) or logon locally
and run command:

gpupdate /target:computer

The refresh command is different on Windows 2000:

secedit /refreshpolicy machine_policy