[gptalk] Re: I can't access the GPO Editor because of a policy.

  • From: "Hernán Cano" <hernan.web@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Wed, 11 Jul 2007 10:55:25 -0500

Thanks for your reply.

Indeed, this is in the local GPO and it was implemented within the user
configuration side of the GPO, I do have access to My Computer, and was able
to rename registry.pol, but I'm having some trouble for accessing a command
prompt from inside Windows because it also is disabled by a policy.

I tried from the "Safe Mode with Command Prompt" but it also uses a Windows
user session, so it also had the policies enabled.

I also tried from the Recovery Console from an installation CD but it didn't
work, since the list of available commands is limited.

I'm currently trying to make a bootable USB device (since the computer
doesn't have a floppy disk drive) in order to execute gpupdate from there.
hopefully that will work.

Any other ideas?


On 7/10/07, Darren Mar-Elia < darren@xxxxxxxxxx> wrote:


I'm assuming this is on the local GPO? If so, and you implemented this
within the user configuration side of the GPO, try this. Go into
c:\windows\system32\grouppolicy\user and delete or rename the file called
registry.pol. Then from a command prompt, issue a gpupdate /force and that
should clear up the problem.


*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Hernán Cano
*Sent:* Tuesday, July 10, 2007 10:34 AM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] I can't access the GPO Editor because of a policy.


I enabled the "Execute applications only from accepted application list"
policy, but only added the mmc console with the snap in for the GPO Editor,
but now I can't access it, so I can't remove that policy (or any other
policy since I can't open the editor). I'm guessing that I can't access the
console because mmc.exe isn't in the accepted application list :\

How can I disable this policy or remove the policies completely?

I tried in Safe Mode, but the policies were implemented too. :S

Thanks in advance for any info on this matter. :)

Other related posts: