[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Some IDIOT placed a domain security policy and now users cannot do ANYTHING cannot open MMC

Posted on 2008-06-17
6
Medium Priority
?
280 Views
Last Modified: 2010-04-18
Ok I need to give details here.   I work for a school district the School has its own domain and the Point of Sale company has its own domain they are not connected in any way.  

The guy in charge of the point of sale network decided to add a security policy to the top of the domain.  This policy has EVERYTHING enabled.  He came to me to fix his oops.  When I log into his DC and try to open the User and Computers MMC it tells me it cant due to restrictions.  I also cannot get to CMD or anything.  How do I fix this guys problem?  

He has everything enabled in this policy and the DC is just locked down.  
0
Comment
Question by:JRose628
  • 3
  • 2
6 Comments
 
LVL 13

Expert Comment

by:ocon827679
ID: 21806142
Can you log in with the domain administrator account?
0
 

Author Comment

by:JRose628
ID: 21806175
I am logging in as the domain admin and i am still fully restricted on the machine.  
0
 
LVL 13

Expert Comment

by:ocon827679
ID: 21806265
Does he have a system state backup?  You might have to boot into DSRM mode and authoritatively restore the system state.
http://support.microsoft.com/kb/240363
http://support.microsoft.com/kb/241594
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 

Author Comment

by:JRose628
ID: 21806657
No Backups
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 21807418
Try booting into Safe Mode on the DC and unlinking the policy in question.
0
 

Accepted Solution

by:
JRose628 earned 0 total points
ID: 21807460
I got it working.  I was able to remote into a workstation that somehow didnt get the policy (Possibly a inheritance filter)  and was able to install the admin kit and delete the policy.

My boss just sent his boss a very bad email.  :)  Thanks

0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

591 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question