Re: Group Policy - Locked myself out

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/10/04 

Date: Mon, 9 Feb 2004 23:11:06 -0700

All you need to do is set a Deny of Full for Administrators on
system32\GroupPolicy folder.
Then, log off and back on as an admin, remove the Deny, and
use your tools to edit and reverse the troublesome policies. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"bigboon" <boon@IntuitionNYC.com> wrote in message
news:ced501c3ef48$b3e0e510$a301280a@phx.gbl...
> I set the Group Policy to lockout certain features (eg.
> Control Panel, Snap-Ins, etc), and acidentally locked my
> own admin account out as well, so now I can't go in and
> change anything, including the group policy b/c when I type
> gpedit.msc in the RUN command, I get an error message stating:
> The Snap-In below, referenced in the document has been
> resricted by policy. Contact your adminstrator for details.
> Group Policy
>
>
> HELP!!!
> thnx,
> boon@IntuitionNYC.com

Relevant Pages

  • Re: Group policy editor
    ... Where is XP group policy and template files located? ... > Simply Deny the admin Full Control on the directory ... It will also prevent the account from being able ... > policy settings, log in as that admin account, remove the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy - Locked myself out
    ... > 2) What is a Deny and how do I set one, ... >>Microsoft MVP ... >>> I set the Group Policy to lockout certain features (eg. ... >>> Control Panel, Snap-Ins, etc), and acidentally locked my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Locked out
    ... an admin, remove the Deny and promptly use gpedit to revert the ... Simplify Group Policy Troubleshooting with the NEW GPExpert ... out the administrator from entering into the Group Policy Object ...
    (microsoft.public.windows.group_policy)
  • Re: MMC - admin locked out too
    ... just use the Deny trick to exempt ... from an admin account before it can edit policy, ... > Limit access to Regedit, MMC, command line, etc. & ... > restrict such items to Administrators only. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy Editor
    ... don't want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ...
    (microsoft.public.windowsxp.security_admin)
Quantcast