AD Policy locking all users (including Admins) out of any administrative tasks

  • Thread starter Thread starter Funky_gallo
  • Start date Start date
F

Funky_gallo

Ok ... I know.. I can't believe I did this... but yesterday I went to
manually copy one policy (from sysvol\policies) with very restrictive
setting (no access to pretty much anything..) and pasted in a newly
created (at least that's what I thought it was) policy.... well the
target policy instead of being my newly created one was actually the
default policy for every users !!!! End result every admin user
totally locked out of any admin task.... is there any recovery utility
that would get me out of this mess???
 
You could try to log onto a computer as a local administrator [domain
user policies will not apply], and then try to access the Group Policy on
the domain controller via gpedit.msc to try to manage the Group Policy that
way. If you are talking about security settings however, you will have to
take another approach. --- Steve
 
I need to change that. First log onto a network computer locally with
the same logon name/password as a domain administrator [you may need to
create local account]. The use mmc, select Group Policy and you will have
option to manage remote computer where you can browse for GPO to manage. I
am not sure if it will work, but easy enough to try. --- Steve

Steven L Umbach said:
You could try to log onto a computer as a local administrator [domain
user policies will not apply], and then try to access the Group Policy on
the domain controller via gpedit.msc to try to manage the Group Policy that
way. If you are talking about security settings however, you will have to
take another approach. --- Steve

Funky_gallo said:
Ok ... I know.. I can't believe I did this... but yesterday I went to
manually copy one policy (from sysvol\policies) with very restrictive
setting (no access to pretty much anything..) and pasted in a newly
created (at least that's what I thought it was) policy.... well the
target policy instead of being my newly created one was actually the
default policy for every users !!!! End result every admin user
totally locked out of any admin task.... is there any recovery utility
that would get me out of this mess???
Click to expand...
Click to expand...
 
Back
Top