Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 277
  • Last Modified:

Some IDIOT placed a domain security policy and now users cannot do ANYTHING cannot open MMC

Ok I need to give details here.   I work for a school district the School has its own domain and the Point of Sale company has its own domain they are not connected in any way.  

The guy in charge of the point of sale network decided to add a security policy to the top of the domain.  This policy has EVERYTHING enabled.  He came to me to fix his oops.  When I log into his DC and try to open the User and Computers MMC it tells me it cant due to restrictions.  I also cannot get to CMD or anything.  How do I fix this guys problem?  

He has everything enabled in this policy and the DC is just locked down.  
0
JRose628
Asked:
JRose628
  • 3
  • 2
1 Solution
 
ocon827679Commented:
Can you log in with the domain administrator account?
0
 
JRose628Author Commented:
I am logging in as the domain admin and i am still fully restricted on the machine.  
0
 
ocon827679Commented:
Does he have a system state backup?  You might have to boot into DSRM mode and authoritatively restore the system state.
http://support.microsoft.com/kb/240363
http://support.microsoft.com/kb/241594
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
JRose628Author Commented:
No Backups
0
 
LauraEHunterMVPCommented:
Try booting into Safe Mode on the DC and unlinking the policy in question.
0
 
JRose628Author Commented:
I got it working.  I was able to remote into a workstation that somehow didnt get the policy (Possibly a inheritance filter)  and was able to install the admin kit and delete the policy.

My boss just sent his boss a very bad email.  :)  Thanks

0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now