Group Policy Pains

  • Thread starter Thread starter TMX
  • Start date Start date
T

TMX

Hi, I have a workgroup server at work, a group policy has been applied
to this machine which has somehow locked down the administrator
account from doing anything. Cant even show hidden files. I tried
going in as the local admin, but the local policy is also locked down,
pehaps by the group policy overiding it? Can anyone help me this
problem as its casuing havok here. Thanks

Tom
 
Howdie Tom!
Hi, I have a workgroup server at work, a group policy has been applied
to this machine which has somehow locked down the administrator
account from doing anything. Cant even show hidden files. I tried
going in as the local admin, but the local policy is also locked down,
pehaps by the group policy overiding it? Can anyone help me this
problem as its casuing havok here. Thanks
Click to expand...

Is it a Group Policy that came from the "domain" or a local Group Policy
applied via GPEDIT.msc?

As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.

cheers,

Florian
 
Howdie!

Florian said:
As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.
Click to expand...

Also keep in mind that all local Group Policies that you defined will be
deleted as well. So you might want to backup those registry.pol files.

cheers,

Florian
 
Hi, thanks for your help,
Is it a Group Policy that came from the "domain" or a local Group Policy
applied via GPEDIT.msc?
Click to expand...

In answer to your questions, Local Group Policy.
As you wrote "workgroup server", I assume you mean the latter one (local
Group Policy). Are you able to log on to the machine and delete both the
files C:\Windows\system32\GroupPolicy\User\registry.pol and
C:\Windows\system32\GroupPolicy\Machine\registry.pol ? (Note that the
GroupPolicy folder is hidden, you might not be able to see it right
away). After that, try a "gpupdate /force" or reboot of the machine.
Click to expand...

Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?

Thanks

Tom
 
Howdie!
Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?
Click to expand...

Okay - what about remoting? You have access to the c$-share? Any kind of
bootdisk that would enable you to delete this file?

cheers,

Florian
 
Okay - what about remoting? You have access to the c$-share? Any kind of
bootdisk that would enable you to delete this file?
Click to expand...

I can remote to the machine, but i cant use any kind of boot disk
because its off site? Sorry to make things worse :)

Tom
 
Howdie!
I can remote to the machine, but i cant use any kind of boot disk
because its off site? Sorry to make things worse :)
Click to expand...

Apart from the solution that you could delete those registry.pol files,
I have no idea what you can do else. Maybe there's someone capable of
booting the machine at the remote site and solve the problem from there,
but I think you're pretty much out of luck from remote...

cheers,

Florian
 
TMX wrote:
Hi,
Thats the problem i'm facing, because its locked down i cant show
hidden files or folders, hence i cant get in to delete the
registry.pol files? Is there another way of getting in and deleting
this?
Click to expand...

cmd and delete? Or if cmd is locked to try command.

Bye
Norbert
 
Back
Top