Default domain policy

Hi

I’ve managed to disable use of mmc’s and the run facility (among others)by using the default domain policy, not realising it would apply to administrators – which obviously it does.

I cannot get into active directory users and computers to change the policy.

Has anybody got any ideas as to how I can bypass/change this policy – without re-building the server?

Many thanks

Fran