[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

group policy windows 2008 server

Posted on 2011-05-12
5
Medium Priority
?
306 Views
Last Modified: 2012-05-11
I made a big mistake. I was playing around the group policy. now, when I login as administrator, I cant do anything. Its all restricted. Please help.....

Thank you
0
Comment
Question by:jessiewang
  • 2
4 Comments
 
LVL 12

Accepted Solution

by:
serchlop earned 2000 total points
ID: 35750977
Try log on any computer in the domain, even with the local admin and install the remote server admin pack and then use right click in the group policy manager icon and select run as other user. Select your domain admin user and when prompted select the GPOs for your domain. Edit it or configu the GPO to not apply to domains admins with deny permission in security tab and apply. OrR use the mmc.exe running it as domain admin, when prompted select your domain and configure the gpo you need.

Maybe to run as other user you need to run the following commando in your cliente computer.

runas /user:mydomain\administrator gpedit.msc

This should solve your problem.

here is some info for admin pack
support.microsoft.com/kb/941314
0
 

Author Comment

by:jessiewang
ID: 35751443
I only have win xp now. And, gpedit.msc is not valid win 32 app. Please help..thank you.

0
 

Author Comment

by:jessiewang
ID: 35751874
how to add activty diectory in mmc? thank you
0
 

Expert Comment

by:fdvfd dfrfv
ID: 35752975
start --> run --> mmc
File --> Add/remove module.
Then add the active directory
This wil only work on a server not on a Windows xp machine.
You can also Deny group policy for Administrators

Use Group Policy Management Console
Click Start, point to Administrative Tools, and then click Group Policy Management.
In the console tree on the left, expand Forest.
Expand Domains.
Expand Domain Name.
Expand Group Policy Objects.
Click the Group Policy object that you do not want to apply to administrators.
In the display pane on the right, click the Delegation tab.
Click the Advanced button in the lower-right corner of the display pane.
Click Add, and then type the account name that you do not want the Group Policy object to apply to.
Click OK.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Suggested Courses

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question