?
Solved

Domain Group policy software restrictions locked out  sbs 2003

Posted on 2014-07-29
4
Medium Priority
?
585 Views
Last Modified: 2014-07-29
I have stupidly applied a domain group policy under software restrictions additional rules that have locked me out of running any programs.

This is true on the server and workstations.

What is the best method to allow access to the active directory group policy to enable me to remove the restriction?
0
Comment
Question by:leibhold
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 4

Accepted Solution

by:
jekautz earned 2000 total points
ID: 40228143
The policies are files store under \\{fqdn}\sysvol\{fqdn}\policies.

You could try to access that folder and delete or rename the policy causing this effect.

Are you able to run Windows Explorer, Command Prompt, Regedit?  Any of these tools could be used to temporarily disable these features.  Since most all group policy settings are stored in the registry, you could delete those settings from the registry, enough to run GPMC.
0
 

Author Comment

by:leibhold
ID: 40228226
I was able to do a gpedit on the 2008 server to allow local programs to run

Have looked under  \\{fqdn}\sysvol\{fqdn}\policies and removed the file/dir that was last modified today
The gpupdate  comes back with processing group policy failed - unable to read the file .....

I am searching though the files to see what one contains the policy for the software restriction
0
 

Author Comment

by:leibhold
ID: 40228267
Hello,
would you like to write this up as a solution?

I took your advice - was able to find the file but  without it being there it would not update ended up

So on another sbs2003 created the default software restrictions policy.
Then opened Registry.pol in note pad on that server

I then copied the contents over the Registry.pol on the affected server in the sysvol  policies {31B2F340-016D-11D2-945F-00C04FB984F9} directory

This appears to have fixed the issue.

Please write the complete solution with your original section and I will award the points.

Thanks you very much for pulling my stupid self out of the fire.
0
 
LVL 4

Expert Comment

by:jekautz
ID: 40228313
I'm glad I could help, but I don't get what you mean by writing up the solution.  If you think my post fixed your problem, then simply mark it as the accepted solution.  That will award the points.

Have a good day.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question