• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 194
  • Last Modified:

domain account

I changed some stuff in my group policy today at a new site.  Now my domain admins account can not install items at that site on the local machines there.  My tree is broken down by site and i added the new policy at the site level.  I only worked with desktop settings, IE etc.. i looked back through and i can not find what i did to make the domain admin accounts not be able to install there.  The domain admin accounts are located in a OU at another site seperate from that OU.  Any help would be appreciated i would hate to have to take all those changes off one by one.
0
hartnessjr
Asked:
hartnessjr
1 Solution
 
Naser GabajCommented:
Deny the Linked Policy from security tab in your group policy Properties

Here are the steps:

In the Domain Controller

START>PROGRAMS>ADMINISTRATIVE TOOLS>ACTIVE USERS & COMPUTERS>right click DOMAIN>PROPERTIES>GROUP POLICY>click once on the group policy that he made the changes>PROPERTIES>SECURITY>in the name section of security window choose the domain users>and in the permissions section choose APPLY GROUP POLICY>check DENY

but since you are out of Domain admin group, it will not let you do it, if this the case then i believe if you add the user to schema admin, then it will work.

let me know.

Regards

Naser
0
 
hartnessjrAuthor Commented:
lol i fixed it im stupid
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now