Policy - Admin Locked Out
From: John H (johnh_at_fbcc.org)
Date: 02/06/04
- Next message: Andy: "Can't access Event logs on Domain Controller..help!"
- Previous message: M. T: "Joining a new domain"
- Next in thread: Christian Schindler: "Re: Policy - Admin Locked Out"
- Reply: Christian Schindler: "Re: Policy - Admin Locked Out"
- Reply: David Brandt [MSFT]: "Re: Policy - Admin Locked Out"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 6 Feb 2004 07:44:48 -0800
I totally blundered. Trying to better secure a group of
trainees accounts, I created a new policy and set the Do
Not Override option. Now, the policy is being applied to
me - the Domain Admin. I cannot access AD to fix my self-
created problem.
I searched for POL files using Windows Explorer and found
newly created entries in the sysvol structure (identified
by date stamp). I also discovered that I can open them in
MS Excel though I did not try to edit as I don't fully
understand the entries.
Question: If I rename or delete the newly created POL
entries in the sysvol file structure, will that allow me
to logoff, log back on, and regain admin rights? Is that
too easy? If not, then how do I reset my permissions in
order to regain control?
- Next message: Andy: "Can't access Event logs on Domain Controller..help!"
- Previous message: M. T: "Joining a new domain"
- Next in thread: Christian Schindler: "Re: Policy - Admin Locked Out"
- Reply: Christian Schindler: "Re: Policy - Admin Locked Out"
- Reply: David Brandt [MSFT]: "Re: Policy - Admin Locked Out"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|