Re: Administrator Locked out
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Fri, 29 Jun 2007 08:53:41 -0700
I usually try network access to the drive, set a Deny of Full for
Administrators on the system32\GroupPolicy directory, login as
an admin, remove the Deny and promptly use gpedit to revert the
policies that are offending.
"blink" <blink@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F7CBA764-DA02-4325-AE38-845EA9F3F26E@xxxxxxxxxxxxxxxx
Thanks Darren,
I will give that a try, bad thing is I blocked access to windows explorer,
command prompt, run command, context menu, etc...EVERYTHING! But I will
see
if I can throw the Hard Drive on another machine and try it out. Thanks
again.
"Darren Mar-Elia" wrote:
blink-
Look under c:\windows\system32\groupPolicy and then in under either
machine
or user, depending upon whether you defined what sounds like an MMC
restriction as per-computer or per user. In the folder in question, there
will be a registry.pol file that contains these settings. You can delete
or
rename this file to something else and then run gpupdate /force and that
should unfree you. However, keep in mind that if you delete the file, any
other Admin Template or Software Restriction policies that you set for
that
side of the GPO will be lost.
Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting
Pak 1.0 at http://www.sdmsoftware.com/products.php
Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
"blink" <blink@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:30AD30C6-1CC1-406A-862C-B01FCB0E5E55@xxxxxxxxxxxxxxxx
Hi all,
I was editing a local group policy on a workgroup machine and somehow
locked
out the administrator from entering into the Group Policy Object
Editor.
"The Snap-in below, referenced in the document has been restricted by
policy.
Contact you administrator for details." Problem is, I logged on under
the
administrator account with admin rights. Now I've locked out the
administrator account from editing the group policy and would like to
know
if
there is a back door way into the group policy editor. Before I have to
reinstall the OS on it again.
Window XP Pro SP2 on a workgroup not AD.
.
- References:
- Re: Administrator Locked out
- From: Darren Mar-Elia
- Re: Administrator Locked out
- Prev by Date: Re: GPO - Create/Delete
- Next by Date: Re: GPO - Create/Delete
- Previous by thread: Re: Administrator Locked out
- Next by thread: restrict who can log onto certain workstations
- Index(es):
Relevant Pages
|
