delete a GPO where Domain admin denied access

  • Thread starter Thread starter MS-News
  • Start date Start date
M

MS-News

Is there a way to get rid of a group policy where we cannot access. Someone
created a GPO and accidently set domain admin- deny. We have lowered its
priority and removed the link. Just wanted to clean it up/remove
permanently

thanks

CR
 
There is a few options here, Simply logon as Enterprise Admin if not same
issue appears there.

You can use ADSIEdit or dsacls to reset the permission of the GPO to the
default permission of the group policy class.

Group Polices are stored within Active Directory in the follow container.
CN=Policies,CN=System,DC=<domain>,DC=<xxx>


--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
Back
Top