• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 421
  • Last Modified:

How do I remove Group Policies on a Windows 2008 Server

In an attempt to secure servers a group policy was created and applied.  There were all sorts of changes.  Stopping services, Permissions on registry, etc.

I basically want to remove all the changes or reset the Policies/permissions back to basics.

I have moved the computers to other OU's and did gpupdate /force and it still has the old policies and permissions.

I have also removed the registry key: HKLM\SOFTWARE\Policies\Microsoft\

Still nothing.
0
abraham808
Asked:
abraham808
  • 5
  • 4
  • 2
  • +1
1 Solution
 
Mike KlineCommented:
A similar question was asked on top group policy MVP Darren Mar-Elia's list last month.  Darren gave a very good response
Darren's great response below...want to make sure he gets the credit
"....you have to be cognizant of the kinds of policies you're moving from, and to. In other words, some policy, when the GPO no longer applies (i.e. a move from the source OU), will remove themselves. Other policy (e.g. many security policies) won't, and thus, if you don't want those policies in effect in the new OU structure, you'll have to explicitly set them to what you want. Bottom line is that don't assume that all the old policies will go away when you move to your new OU structure. ..."
Thanks
Mike
0
 
himvyCommented:


Run gpresult and try to get the GUID of the policiy.
Then go to ADSIEDIT /SYSTEM/POLICY/GUID of the policy and delete it.
0
 
abraham808Author Commented:
i ran gpresult and i don't see the GUID.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
himvyCommented:


Run gpotool from the resouce kit and you will get the GUID.
0
 
ARK-DSCommented:
Hi,

Some policies get tattoed in the registry and hence apply even when the policy is not actually applying.

Please try this:

"Process even if the Group Policy Objects have not changed" under User Configuration\Administrative Templates\System\Group Policy

This will refresh the group policies once again.

What you can try is to re-apply that GPO and then force updation of GPOs on clients and the again remove it and see if it removes them this time. Also, check for and GPO removal settings if they are there before removing the GPO this time. and again update GPOs.

If this does not help, we might need to make manual changes in the registry.

regards,

Arun.
0
 
abraham808Author Commented:
himvy:
I was about to do the ADSIEDIT but this just removes the policy from Group Policy right?
Or does it remove it from the machine?


ark-ds:
I don't see this
"Process even if the Group Policy Objects have not changed"


PS: I have a Windows 2003 Domain.
gp.jpg
0
 
ARK-DSCommented:
Hi,

I apologize, it should be in here :
Computer Configuration/Administratove Templates/System/Group Policy/ "Registry Policy Processing" and in there, is the option which says "Process even if there is no policy change".
0
 
himvyCommented:


It will remove the policy from the group policies.

If you want just the default policies ,you can run a tool DCGPOFIX /ignoreschema.
This will give you default domain policy and default domain controller policy.Then you can create any other GPO you want as per your requirement.
0
 
himvyCommented:
0
 
abraham808Author Commented:
Ok i just want the group policy removed from 1 machine.  I dont want to remove all group policies from AD.
0
 
abraham808Author Commented:
I just have to re create these machines.  The whole thing is a mess
0
 
abraham808Author Commented:
This is probably the right answer until the develop something to remove old policies
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 5
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now