Here's the situation:
Somehow, we lost access to all AD admin tools. Got the error: "The snap-in below ... restricted by Policy. Contact your Administrator". Did a search and found out how to get back into the tools. So, OK, we can create users again.
But, if I right-click the domain or any OU, then click Pproperties, we still don't see the group policy tab. The only tabs are: General, Managed by, Object & Security. There *should* be a 5th, Group Policy tab.
I can run gpedit.msc from the command line and it comes up, but empty. There are no settings there to configure.