Default Domain Policy Trashed

[Guest]

I made changes to my default domain policy and managed to lock myself out of much of the mmc.

(I went to User config\Admin Templates\Windows Components\Micro Manage Console. Double CLicked Restrict Users to the explicitly permitted list of snap ins
Microsoft KB226243 suggests replacing the existing information on a portion of Gpttmpl.inf in order to reset user rights in the default domain policy. I looked at my .inf file and I didn't see any settings in there that seemed to have anything to do with restricting access. I'm basically very skeptical that this will fix my issue. I just want to set the default domain policy back to its OUT OF THE BOX settings.

 

[Chriss3]

Hello, there is two way i will come up with for you

1. found out the GUID for the Default Domain Policy in
\\SERVERNAME\SYSVOL\home.se\Policies and cut it off and place it in a temp
folder, then can't the policy applie or deny read for the worksation you
useing to the

SYSVOL folder.

I made changes to my default domain policy and managed to lock myself out of much of the mmc.

(I went to User config\Admin Templates\Windows Components\Micro Manage

Console. Double CLicked Restrict Users to the explicitly permitted list of
snap ins)

Microsoft KB226243 suggests replacing the existing information on a

portion of Gpttmpl.inf in order to reset user rights in the default domain
policy. I looked at my .inf file and I didn't see any settings in there that
seemed to have anything to do with restricting access. I'm basically very
skeptical that this will fix my issue. I just want to set the default
domain policy back to its OUT OF THE BOX settings.

 

[Nafiz Ahmed [MSFT]]

You can call the support line and try to get a tool called
recreatedefpol.exe that will recreate the default policy. It is a tool that
is developedf by one of the internal support guys. You will have to run it
from the dc and logout and logon again to make your admin the recovery
agent.

Nafiz Ahmed