locked out admin – Group Policy Common Scenarios Using GPMC

Tags:
Active Directory
GPMC
Group Policy
Hi. New to AD. Was looking for an easy way to implement group policy over a small LAN. Came across this (http://www.microsoft.com/downloads/details.aspx?familyid=354b9f45-8aa6-4775-9208-c681a7043292&displaylang=en) from MS. Imported the policies fine and applied to test OUs. I wasn't able to see the policies taking effect. Searched web and did as much troubleshooting as I could to no avail. So decided to try applying the Lightly managed policy at the domain level. This caused apparently did work. Unfortunately, the way I verified this was when I realized that my admin account on the domain controller was now restricted from accessing GPMC. Any ideas how I can undo the policy I applied at the domain level and regain admin control without reinstalling?
1

Answer Wiki

Thanks. We'll let you know when a new response is added.

What kind of error do you get trying to use GPMC? If you are still an administrator on the domain, then you should be able to undo any policy settings that are causing problems, manually. The key is to understand what you are locked out from. Did you get get removed from the Domain Admins group by this policy? If not, then it should prevent you from undoing the policy. If you are just being restricted from using the GPMC MMC snap-in then can you still run AD Users and Computers? If so, then un-install GPMC and use the old AD U&C method of unlinking that GPO from the domain.

In the future, before linking a GPO, make sure you use the Group Policy Modeling feature in GPMC to analyze what settings *will* be applied rather than finding out the hard way 🙂

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: