Re: Rolling back GPO changes
- From: "Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx>
- Date: Wed, 27 Jun 2007 19:05:08 -0700
Craig-
When you say, put things back the way they were, do you mean you left the policy unconfigured? If that is the case, then that won't work. Security policies "tattoo" target systems. You can't undo a change by simply removing it. You would need to add all of the groups back into that user right on the GPO for their state to be returned to normal. So, I think this would include: Administrators, Users and Backup Operators by default.
Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php
Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
"Craig Chin" <CraigChin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4EECFB83-0281-4F97-9B4B-921FF3B48E32@xxxxxxxxxxxxxxxx
I applied a change to my domains default GPO adding a group to the log on
LOCALLY SECTION OF USER RIGHTS ASSIGMENT. i BELIEVED THAT ADDING THE GROUP
WOULD STILL ALLOW DOMAIN USERS TO LOG ON TO THEIR pcs AND ALSO THIS NEW GROUP
to access the PCS too.
i FOUND THAT USERS WERE BEING DENIED THE RIGHT TO LOG ON TO THEIR pcs so i
removed the group and put back things to how they were. Even after doing so
and doing a GPUPDATE on the clients they are not removing the group i gave
access to log on locally and now only this group and domain admins can log on
to the PCS on the network,what should i do to resolve this ?
.
- Prev by Date: Re: Windows Time Server via Group Policy
- Next by Date: Re: Desktop Shortcuts
- Previous by thread: Logon script is hit or miss
- Next by thread: Re: Desktop Shortcuts
- Index(es):
Relevant Pages
|
