Re: Remove GPO setting Help!!



Sounds good. Thanks for letting me know what worked. I assume you removed
the offending setting in Group Policy otherwise it could eventually refresh
and apply to that user again. --- Steve


"TT" <TT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:376A85B4-6D14-498C-B028-EE6B598B7447@xxxxxxxxxxxxxxxx
The policy is a domain/OU GPO. Unfortunately it is also one that tells the
computer not to run any .exe file. I had the user login using another test
account that happened to be on the computer (thank goodness) and had them
VPN
in. I was then able to load the users registry and delete the offending
key.
After a reboot is now able to get back to work ;o]. Thanks for the help.
Teresa

"Steven L Umbach" wrote:

Where was the policy applied - locally or domain/OU level?? If that
registry
key can be deleted on their computer somehow then it should clear that
setting until the Group Policy is changed/forced refreshed again. If it
is a
domain/OU GPO setting then you could correct that setting and it should
refresh over the VPN at the next GP refresh interval which may be up to a
couple hours. You might also be able to remotely delete that registry
key
while it is connected via the VPN if you have SMB connectivity to that
computer. --- Steve


"TT" <TT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:93EE3654-6F51-4D80-AAAB-F170EE250B72@xxxxxxxxxxxxxxxx
A GPO setting was applied to a laptop at a remote location. The user can
not
longer run anything on their computer. Any ideas how I can get rid of
the
setting?

The GPO that was mistakingly set was "Administrative
Templates\System\Run
only allowed Windows applications" The registry location is
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun"
I can have the user login as another acount and VPN in to our network
but
they can no longer login as themself as the computer will not allow
them
to
run anything. Help!!





.



Relevant Pages

  • Re: Remove GPO setting Help!!
    ... Where was the policy applied - locally or domain/OU level?? ... refresh over the VPN at the next GP refresh interval which may be up to a ... You might also be able to remotely delete that registry key ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Internet Explorer Security Settings Refresh
    ... You can try to broadcast that the registry was changed -- perhaps that will ... (ByVal hwnd As Long, ByVal msg As Long, _ ... I would like a way to force Internet Explorer to "refresh" the: ... The functionality can be re-created by going: into security and adding a site to a zone. ...
    (microsoft.public.vb.winapi)
  • Re: Applying User GPO for Remote Users
    ... You'll have to get them to log on to the domain - that is start up the VPN ... In the logon screen there's a "dial ... I've linked the GPO to an OU with the users I ... refresh intervals with no luck. ...
    (microsoft.public.win2000.group_policy)
  • RE: OSD deployment to remote VPN users
    ... The computer will automatically run the policy refresh when it finishs the ... boot process at the end. ... This is assuming you have client in the image. ... should be able to start a MS VPN connection from within the OSD deployment. ...
    (microsoft.public.sms.swdist)
  • Re: Refresh computer after VPN logon
    ... if you add net use command to a batch file. ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... every 30 days, or more often, and refresh at each logon or reboot. ...
    (microsoft.public.windows.server.networking)