Group Policy Windows 2003 - Need to Delete, Can't! Help!

Long Story Short -

I imported too restrictive of a GPO on top of my Default Domain Policy, now DNS has stopped, services have stopped, and I can not turn them back on.

I need to delete this thing out, but I can not use the GPMC, because it no longer recognizes the server (suspected due to the restrictions placed on the services (which have been turned off))

I have gone into C:\Windows\SysVol\Domain\Policies, and renamed it Policies.bak but it is still pulling it up, I know because I set a message up before logging in, and it keeps showing up every reboot.  I am shy of deleting out the entire policies directory, but I am close to trying it.

How can I delete this policy out so I can start over again?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You shouldn't rename that directory.

Figure out what GUID contians the bad policy and cut and paste it somewhere else.

Reboot the server.

Open up ADUC and turn on Advanced view.  Dig down into the System folder and find the same GUID you moved from SYSVOL (it should be under policies) - delete it.


Let me know.
Todd_BainAuthor Commented:
I deleted both GUID from the SYSVOL/Domain/Policies directory, rebooted still is loading the policy.

It is the only DC, so where else is this stored that I need to delete it from?

I could not copy / move because of the policy restriction.

Do you remember exactly what you enabled/disabled that is causing this?  I might be able to figure something out.

Did you also remove it from ADUC?

If these are Registry entries, then we have to reverse the effects to remove the restrictions.

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Todd_BainAuthor Commented:
I can not get into ADUC

Looks like it is time to call Microsoft.
If you know the GUID (should now be in the Recycle Bin) then fire up ADSIEdit.msc and find all instances of this a remove them.

Todd_BainAuthor Commented:
This ticket can be closed, Microsoft solved the issue.
How did they do it?  It would benefit this question to have an answer.

Todd_BainAuthor Commented:
I spent over 5 hours on the phone with at one time 3 of their engineers.

It would be way too lengthy to disclose the entire procedure that took place.

If this happens to you, call Microsoft, use your TechNet Sub, or get a one time ticket for $245, and let them walk you through it.

They will have to walk you through registry edits to get the services running from a 4 state (gpo assigned) to a 2.

They will run some utilities which rebuild your GPO back to the original state.

They will run some diagnostics that they download and put onto your machine (I'm sorry I didn't write down everything as it was happening) and check all of your events to make sure your server is not going to see any ill effects.

Seriously its worth the money to call, as much time on the phone as I was yesterday, it was worth every penny.
Agreed, I've had to use them before and found that they are very thorough.

Thanks for the update.
Closed, 500 points refunded.
The Experts Exchange
Community Support Moderator of all Ages

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.