GPO ISSUE NEED HELP!!

  • Thread starter Thread starter MJC
  • Start date Start date
M

MJC

Made the stupid mistake of removing Domain Admins and Enterprise Admins from
the ACL of a GPO. Can't edit now, can't take ownership....any way of forcing
DA\EAs to the ACL??
 
I'm assuming you're trying to edit it from GPMC? What you'll need to do is
take ownership as a domain administrator of the GPMC object using ADUC or
ADSIEdit. Then you should be able to go in and use GPMC to modify the
permissions back to the way you need them. You'll need to take ownership of
the GUID-named container corresponding to your GPO under Cn=Policies,
CN=System. Hopefully you know the GUID :)

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting
Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
 
Back
Top