I guess I don't quite follow the scenario, but can you just turn off the Enforced setting on the Default Domain Policy and then set the Default DC Policy with the appropriate rights? Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of octai.kelly@xxxxxxxxxxxx Sent: Sunday, August 13, 2006 4:00 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Override GPO No Override?! When I was setting up a development lab domain, I followed the suggested practice of tightening up security on my DC by setting the "No Override" default domain policy option. However, now I am away from the dev lab with no way to connect to the domain, trying to install Windows Installer 3.1. This uses an app called Update.exe which requires specific user rights such as backing up files. The effective policy is preventing me from proceeding. I think a clean install may be the only way around this, but I don't want to attempt this on the road. Is there any way that I could get around this to install these applications? Thanks in advance, Octai *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************