Re: Getting around a Security GPO

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello aja44,

Authenticated users are ALL domain users, including the Administrator. So you kicked out yourself. Please describe more in detail what you will achive for the user, that we can find a solution for you. Normally no domain user can login to a DC for example.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi,

I was building a Domain Controller for my school and created a
Security GPO that restricted access which was meant for just the
Students. I thought I removed that Authenticated Users group prior to
making all my settings, but 90 minutes later I was unable to open a
Management Console I already created and was receiving an error that I
did not have permissions on the server to create users home
directories.

I had the GPO's serial number written down, so connected via a UNC
from another computer on the domain and drilled into SYSVOL > Domain
Name > Policies and removed the policy manually. When I rebooted the
server I was still unable to do anything. I ended up blowing out the
box and rebuilding it from scratch.

In the future, is there a tool or procedure for getting into AD
without the policies taking affect or something I can do from another
system?

Thanks



.

Relevant Pages

  • Re: Remote Desktop Logon to Server
    ... User Rights assignments under Local Policies. ... > person to logon to the server in a restricted mode. ... > change (this was before I put them into the Administrator ...
    (microsoft.public.win2000.networking)
  • Re: windows 20000 problem
    ... I know that the computer is not being locked down by group policies which is ... and the administrator is in an OU where the policy doesnt apply. ... rebuild which I don't really want to do as this is our intranet server. ... > Domain policy will also apply to users and computers in Organizational ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 server - How to protect my activity?
    ... And you have really to talk with the system administrator, because he is responsible for the rules of the company for accessing the servers. ... This Windows 2003 standard server was installed by ... If some policies run and you are not allowed to configure policies, ... else is watching what I'm doing on the Windows 2003 remote server? ...
    (microsoft.public.windows.server.security)
  • GPO only for admins
    ... Actually I have some policies in may domain with a hight level of ... would like to create a new policy only for administrator for deny some ... The Default Policy Domain has "Authenticated users" and the ...
    (microsoft.public.win2000.group_policy)
  • Permissions on created folder
    ... If I create a folder called public on a windows 2003 server, ... remove creator owner and system and leave only administrator and ... authenticated users. ...
    (microsoft.public.security)