• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 198
  • Last Modified:

How do I remove an old GPO off a W2K3 server?

I am trying to (learning to) make changes to the local security policy and running into locks on items such as "password minimum age", etc. Looks like our IT admin originally had the server connected to a domain. I am working on it as local administrator off the domain and walking through the W2k3 MS Threats & Countermeasures Security Settings.
1 Solution
In the Control Panel you will see there is "Group Policy Management" in side there you can see your entire AD structure and the + next to each one. If you expand the OU you are looking to delete the GPO from you can delete it from the OU or if you go down to "Group Policy Objects" you will see all Policys. If you delete from GPO at the bottom and not the OU you will be given the option to delete from all OU that it is linked to. You can also highlight the policy and in the right navagation pane you will see 4 tabs along the top, Scope, Details, Settings, and Delegation. Inside "Settings" you will see what options are configured on these policys, follow the heirarchy of User>Windows Settings>IE and so on to edit pre-existing policys. or just delete as you see fit.

Hope this helps.
Use the Security Configuration and Analysis mmc plug-in to compare the settings on this server with those on a server you know to have your organization's standard set of policies applied.  

1.  Go to the server with the known standard configuration and use the Security Configuration and Analysis tool to export a template containing the server's settings.
2.  Go to the other server and open the Security Configuration and Analysis tool.  Create a database and import the template you created in step 1.
3.  Right-click Security Configuration and Analysis and choose Analyze Computer Now.

This will compare current settings with standard settings.  You'll be able to see discrepancies more clearly than by combing through Local Security Policy.  
normasueAuthor Commented:
Not quite the answer - but that actually answered a different question for me. Turned out I had to get IT help from the person who initially setup the server to remove it from the domain and I could continue with my settings.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now