• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 371
  • Last Modified:

How to remove all group policies

I have a system which has VPn and have some issues so i suspect some GPO's are not affected properly or corrupted.

How can i reset all GPO's on this system
Remove them all and reapply them
Can i have the steps please

Windows 7 OS and windows 2003 AD
0
mtthompsons
Asked:
mtthompsons
  • 2
1 Solution
 
Will SzymkowskiSenior Solution ArchitectCommented:
You can use rsop.msc to view what policies are being applied correctly. When rsop.msc opens right click on computer configuration and user configuration and check General Tab for the policies that are/should be applied. You can then check the error Tab for any policies that are not working or failing when policy processing is happening. You can also reference the event viewer as well to see if policies are failing.

If you are in fact having issues with group policies you can do the following...
- Move your user and computer account to an OU where policies are not being applied
- from the client run gpupdate /force
- then reboot the machine
- run rsop.msc again to check the polciies that should now be removed
- move your user account and computer account back into the respective OU's
- run gpupdate /force again and reboot

Will.
0
 
mtthompsonsAuthor Commented:
Thanks
Does the GPO's affect local administrator?
I mean any local accounts on the system do they get the GPO's?
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
No, local accounts are not affected. There are however certain policies (can't think of any off the top of my head) that when they are applied to the machine they are also applied to the local account as well. These policies cannot be removed until a fresh install of the OS has been done.

Most likely in your situation this is not the case. I just re-call that there were some policies a few years back that also affected the local machine and users while logging in locally.

Will.
0
 
Mike KlineCommented:
There are some settings that even if you remove them still apply.  You will hear this referred t as "group policy tattooing" GP MVP Darren has a good blog on that

http://gpoguy.com/whitepapers/understanding-policy-tattooing/

You can also check your event logs for GP errors.

Thanks

Mike
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now