Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Some IDIOT placed a domain security policy and now users cannot do ANYTHING cannot open MMC

Posted on 2008-06-17
6
Medium Priority
?
276 Views
Last Modified: 2010-04-18
Ok I need to give details here.   I work for a school district the School has its own domain and the Point of Sale company has its own domain they are not connected in any way.  

The guy in charge of the point of sale network decided to add a security policy to the top of the domain.  This policy has EVERYTHING enabled.  He came to me to fix his oops.  When I log into his DC and try to open the User and Computers MMC it tells me it cant due to restrictions.  I also cannot get to CMD or anything.  How do I fix this guys problem?  

He has everything enabled in this policy and the DC is just locked down.  
0
Comment
Question by:JRose628
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 13

Expert Comment

by:ocon827679
ID: 21806142
Can you log in with the domain administrator account?
0
 

Author Comment

by:JRose628
ID: 21806175
I am logging in as the domain admin and i am still fully restricted on the machine.  
0
 
LVL 13

Expert Comment

by:ocon827679
ID: 21806265
Does he have a system state backup?  You might have to boot into DSRM mode and authoritatively restore the system state.
http://support.microsoft.com/kb/240363
http://support.microsoft.com/kb/241594
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:JRose628
ID: 21806657
No Backups
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 21807418
Try booting into Safe Mode on the DC and unlinking the policy in question.
0
 

Accepted Solution

by:
JRose628 earned 0 total points
ID: 21807460
I got it working.  I was able to remote into a workstation that somehow didnt get the policy (Possibly a inheritance filter)  and was able to install the admin kit and delete the policy.

My boss just sent his boss a very bad email.  :)  Thanks

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Suggested Courses

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question