Re: computer policy

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 04/25/04 

Date: Sat, 24 Apr 2004 21:37:07 -0700

Just log in as an admin, then use the security dialog
on system32\GroupPolicy to set a Deny of Full Control
for Administrators group.
Now log off and back on, remove the Deny, and then
use Local Security Policy to undo what you did in error
that shut you out. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"geepod" <geepod@hotmail.com> wrote in message
news:34cc01c4294d$c2245c80$a601280a@phx.gbl...
> I am the administrator ona xp pro machine, i have applied
> a policy that was meant for the users that just use the
> internet (this is a public computer for internet access
> in a hostel).  Since applying the policy i can no longer
> even as administrator run the mmc, no run command, no
> command prompt etc.
> I was hoping to just reinstall ove the top but i no
> longer have rights to, i cannot even make the set up boot
> disks as i cannot execute or run batch files and my xp
> pro cd is not bootable.
> The only option i have at the moment is to remove the
> floppy drive and place it in the office machine (xp pro
> but no floppy drive)make the disks then put it back in
> and i should be fine but i wondered if there was a hassle
> free way ?
> It is my fault for not paying attention when setting the
> policy but is there anyway te rerun the policy editor and
> change back to normal ? or am i stuck with the floppy
> disk option ?
> cheers in advance

Relevant Pages

  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: lockdown desktop without Group Policy
    ... Group Policy settings. ... Logon as an administrator ... Right-click on the GroupPolicy folder and Properties - Security ... and enter "Edit Group Policy" for the name ...
    (microsoft.public.windows.terminal_services)
  • Re: [PATCH] private mounts
    ... > root squashing is broken. ... Root squashing is there to enforce the policy that nobody gets to access ... Strong security, OTOH, enforces the policy that you need to authenticate ... Your administrator has set a certain policy on the fileserver, ...
    (Linux-Kernel)
  • log on to a domain controller as a non-administrative user
    ... Help (Under Security then, How to... ... To log on to a domain controller as a non-administrative ... Before you can change the policy for user rights, ... is a member of the Administrator Group. ...
    (microsoft.public.win2000.security)
  • Re: Urgent
    ... Created a new GP and forgot to set no read access for the administrator ... to reset the group policy or change the read access for administrator ... Remove the Deny that was just set previously. ... As I said, I have not tried this out in W2k3 standalone, but if as you ...
    (microsoft.public.windows.group_policy)