Discussion Locked

Screwed Up Group Policy

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Urgent Help Needed:
I made change in GP for the domain to restrict the loading of ADUC snap-in in the MMC. When I log on Administrator I can't open it now. How do I fix this. I'm sure I made it so that only administrators could open it. HELP!!!

4 replies

by maxwell edison

Perhaps you can run the group policy verification tool provided by Microsoft to help you determine the cause of the apparent administrator restriction.

Information, explanation and the tool download link can be found at:

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpotool-o.asp

Microsoft Knowledge Base Article - Q250842 titled, "Troubleshooting Group Policy Application Problems" at the following link:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q250842

There are various tools available that can help with GPO management. FAZAM 2000 provides analysis and management of Group Policy, and builds on Microsoft's native Windows 2000 infrastructure to provide greater manageability and control overGPOs.

http://www.fullarmor.com/solutions/group/

(Evaluation download available.)

Active Administrator allows administrators to manage Active Directory Security and Group Policies more efficiently.

http://www.smallwonders.com/activeadmin.htm

(Evaluation download available.)

Also, look at this link to an article that discusses creating group policy objects from the Group Policy MMC instead of from the ADUC snap-in.

http://www.rambuk.dk/Windows2000/fog0000000130.html

REMOVE SPACES from the pasted URLs.

I realize that this is not an exact answer, but perhaps these links will provide a helpful clue.

by maxwell edison

Ntrights.exe is a Resource Kit utility that can be used to set user rights from a command prompt. Ntrights.exe can be used to manipulate the rights on either the local computer or a remote computer. The Help output for Ntrights.exe does not list allthe logon rights that can be modified. The NTRights utility (Ntrights.exe) is included in the Windows 2000 Resource Kit.

http://www.microsoft.com/windows2000/techinfo/reskit/default.asp

Another related article:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q276590

REMOVE SPACES from the pasted URLs.

by tim marshall - houston

Actually the fix is easy, just go into the registry to the HKCU\software\policies\microsoft key and change the setting there. After all GP are just Reg settings.

This discussion is closed to new replies.