Well, no, you wouldn't be able to disable the enforced if you couldn't access the domain, but in your original note, you didn't indicate that you prevented yourself from logging on--just installing an update. If you truly can't logon remotely or locally it will be tough to fix this without a wipe and load. Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of octai.kelly@xxxxxxxxxxxx Sent: Wednesday, August 16, 2006 5:21 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Override GPO No Override?! Thanks for your reply. Can I turn the Enforced setting off without having access to my domain? What about leaving the domain and creating / joining a new workgroup for now. Will that introduce other problems? I'm running Win2K SP4 on my notebook and the PDC back at the office is running Windows Server 2003. Regards, Octai > > From: "Darren Mar-Elia" <darren@xxxxxxxxxx> > Date: 2006/08/14 Mon AM 12:19:31 EST > To: <gptalk@xxxxxxxxxxxxx> > Subject: [gptalk] Re: Override GPO No Override?! > > I guess I don't quite follow the scenario, but can you just turn off > the Enforced setting on the Default Domain Policy and then set the > Default DC Policy with the appropriate rights? > > Darren > > -----Original Message----- > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] > On Behalf Of octai.kelly@xxxxxxxxxxxx > Sent: Sunday, August 13, 2006 4:00 AM > To: gptalk@xxxxxxxxxxxxx > Subject: [gptalk] Override GPO No Override?! > > When I was setting up a development lab domain, I followed the > suggested practice of tightening up security on my DC by setting the "No Override" > default domain policy option. However, now I am away from the dev lab > with no way to connect to the domain, trying to install Windows Installer 3.1. > This uses an app called Update.exe which requires specific user rights > such as backing up files. The effective policy is preventing me from proceeding. > I think a clean install may be the only way around this, but I don't > want to attempt this on the road. Is there any way that I could get > around this to install these applications? > Thanks in advance, > Octai > > *********************** > You can unsubscribe from gptalk by sending email to > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field > OR by logging into the freelists.org Web interface. Archives for the > list are available at //www.freelists.org/archives/gptalk/ > ************************ > > *********************** > You can unsubscribe from gptalk by sending email to > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field > OR by logging into the freelists.org Web interface. Archives for the > list are available at //www.freelists.org/archives/gptalk/ > ************************ > *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************