You don't have access to the active directory? that makes life tough!!
If you are looking for a temp fix, so you can actually go in and apply
things the way you wanted it to, you can use windows explorer to browse to
the sysvol\policies folder, select the domain policy (or whichever is the
offending policy), and deny read for the administrator. This will allow you
to get back into things correctly to fix it (yes, I am speaking from
experience).
Once you are back in business, you can correct the problem by changing OU's,
where the policy applies, the policy settings, or policy security.
Hope this helps!
Herb
