group policy windows 2008 server

Posted on 2011-05-12
Last Modified: 2012-05-11
I made a big mistake. I was playing around the group policy. now, when I login as administrator, I cant do anything. Its all restricted. Please help.....

Thank you
Question by:jessiewang
    LVL 12

    Accepted Solution

    Try log on any computer in the domain, even with the local admin and install the remote server admin pack and then use right click in the group policy manager icon and select run as other user. Select your domain admin user and when prompted select the GPOs for your domain. Edit it or configu the GPO to not apply to domains admins with deny permission in security tab and apply. OrR use the mmc.exe running it as domain admin, when prompted select your domain and configure the gpo you need.

    Maybe to run as other user you need to run the following commando in your cliente computer.

    runas /user:mydomain\administrator gpedit.msc

    This should solve your problem.

    here is some info for admin pack

    Author Comment

    I only have win xp now. And, gpedit.msc is not valid win 32 app. Please help..thank you.


    Author Comment

    how to add activty diectory in mmc? thank you

    Expert Comment

    start --> run --> mmc
    File --> Add/remove module.
    Then add the active directory
    This wil only work on a server not on a Windows xp machine.
    You can also Deny group policy for Administrators

    Use Group Policy Management Console
    Click Start, point to Administrative Tools, and then click Group Policy Management.
    In the console tree on the left, expand Forest.
    Expand Domains.
    Expand Domain Name.
    Expand Group Policy Objects.
    Click the Group Policy object that you do not want to apply to administrators.
    In the display pane on the right, click the Delegation tab.
    Click the Advanced button in the lower-right corner of the display pane.
    Click Add, and then type the account name that you do not want the Group Policy object to apply to.
    Click OK.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
    This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now