Local Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
XP Pro for patients to use. Well i don't want it joined to our server 2k3
domain just a workgroup and some local GPO's. I didnt think when i was going
through and setting my GPO settings that i was locking my admin account down
as well. But i have i realized it this morning when i remembered i wanted to
modify something. Logged in as admin and can't do much. I can not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS
 
LeRoy said:
Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
XP Pro for patients to use. Well i don't want it joined to our server 2k3
domain just a workgroup and some local GPO's. I didnt think when i was going
through and setting my GPO settings that i was locking my admin account down
as well. But i have i realized it this morning when i remembered i wanted to
modify something. Logged in as admin and can't do much. I can not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS
Click to expand...

Sounds like a challenging one there, maybe you should try to disable GPO
functionality in the registry editor:

* Create DWORD DisableGPO if it doesnt exist in location
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
* Give your newly created registry key the value 1 (default value is 0
which means the functionality is enabled)
* Restart computer
* Change/remove troublemaking GPO(s) in question

Hopefully this will help.
 
is there a way to edit registry besides using run command? as it is also
removed from my start menu as admin or a user account
 
LeRoy said:
is there a way to edit registry besides using run command? as it is also
removed from my start menu as admin or a user account
Click to expand...

Is the command prompt also disabled? If it is you have succeeded in
locking yourself out. There is a way to run commands with a custom made
shell which i got source code on, but you are probably better off
reinstalling the machine as it sounds like you lost any control of it.
 
In
LeRoy Vanek said:
Ok, I work for local hospitol in ohio. Yesterday i was
setting up a PC with
XP Pro for patients to use. Well i don't want it joined to
our server 2k3
domain just a workgroup and some local GPO's. I didnt think
when i was going
through and setting my GPO settings that i was locking my
admin account down
as well. But i have i realized it this morning when i
remembered i wanted to
modify something. Logged in as admin and can't do much. I can
not undo the
GPO because i set do not open mmc in author mode :-(.
I need to figure out how to remove the gpo settings from the
admin account
or anyway to undo settings so i can administer the PC again.

Thanks

LeRoy,
CIW,A+,Net+,MCP,MOS
Click to expand...

Once you get this sorted out you might want to consider using
this program from Microsoft instead of the local security
policy.

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Good luck

Nepatsfan
 
Back
Top