change permission on Org Unit in Active Directory
I was trying to deny a group policy for domain admins and I accidently denied all access to the organization unit to domain admins. If I remember correctly System and Enterprise admins had inherited security. Is is possible to "Un-Deny" the Org Unit? what should i log on as?
Last Comment
ASKER
Safe mode or directory services restore mode? Tried safe mode and could not sign on as administrator.
the Administrator is not supposed to be locked out in Safe mode. Note don't just rely on being an administrator.
ASKER
Either I don't remember the password or it's locked. I guess I will try one of the other domain controllers in safe mode, will post progress as i go, thanks.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
found an easy answer
Windows Server 2003
Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).
129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
http://technet.microsoft.com/en-us/library/cc700835.aspx
Every installation of Active Directory has an account named Administrator in each domain. This account cannot be deleted or locked out. In Windows Server 2003, the Administrator account can be disabled, but it is automatically re-enabled when you start the computer in Safe Mode