GPO NEED HELP

  • Thread starter Thread starter MJC
  • Start date Start date
M

MJC

Made the stupid mistake of removing Domain Admins and Enterprise Admins from
the ACL of a GPO. Can't edit now, can't take ownership....any way of forcing
DA\EAs to the ACL??
 
MJC said:
Made the stupid mistake of removing Domain Admins and Enterprise Admins
from the ACL of a GPO. Can't edit now, can't take ownership....any way of
forcing DA\EAs to the ACL??
Click to expand...

The owner, i.e., the creator, of the GPO should still be able to change
the permissions.

Owners of objects (NTFS etc) can always change permissions even if
they set themselves explicitly to Deny_All (No_Access).

Admins should have the ability to Take Ownership if that fails.
 
Back
Top