Announcement

Collapse
No announcement yet.

Very restrictive GPO on stand alone 2003 Server accidently applied to all users

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Very restrictive GPO on stand alone 2003 Server accidently applied to all users

    Hello,

    Maybe you can help me out of this gpo corner.
    The problem is with a stand alone 2003 server in a workgroup, no domain.
    I created a gpo from to restrict remote users to only run a single program when they log in.
    I must have created the policy in the wrong place, havn't assigned objects to that policy and after rebooting for windows updates the restrictive gpo was applied to the administrator account.
    So I can't do anything.
    When windows 2003 boots I can access the server from another workstation,
    C$, can open the server's registry from the local regedit.
    Is there a way around?
    Is it possible to delete or disable that policy?

  • #2
    Re: Very restrictive GPO on stand alone 2003 Server accidently applied to all users

    Have you tried to edit the policy from another computer?
    i.e. open an MMC, add the Group Policy snap-in, then browse to the server and open it's local policy.

    BTW - local group policy will affect all users that log on to the machine, even administrators. What it sounds like you are trying to is only possible in an Active Directory environment.
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: Very restrictive GPO on stand alone 2003 Server accidently applied to all users

      JeremyW is right.
      Windows 2k/2k3/xp's local GP applies to all logged on users.
      If the machine is member of the domain, the local GP is overwritten by higher lever GPOs.
      Windows Vista brings changes in this area.
      http://www.petri.com/configure_multi...dows_vista.htm

      In order to reset the local GP, here is the link
      (Google, you are genius!! )
      http://www.mcse.ms/message1567084.html
      Regards,
      Csaba Papp
      MCSA+messaging, MCSE, CCNA
      ...............................
      Remember to give credit where credit is due and leave reputation points where appropriate
      .................................

      Comment

      Working...
      X