hi jim adsiedit did the trick! didn't know about this one. well thanks a million - you saved my day ... greets sascha ________________________________ Von: Jim Hathaway [mailto:JimH@xxxxxxxxxxxxxxx] Gesendet: Freitag, 31. Oktober 2003 17:39 An: thin@xxxxxxxxxxxxx Betreff: [THIN] Re: AW: Re: OT: AD Policy This may help: http://www.jsifaq.com/SUBH/tip3800/rh3823.htm - Domain Administrators group fails to open a Group Policy Object If this doesn't work, you may need to see about copying the contents of the locked out policy to a new one. As I recall, someone has posted previously on how to copy an existing group policy to a new one. HTH J -----Original Message----- From: Pape Sascha [mailto:Sascha.Pape@xxxxx] Sent: Friday, October 31, 2003 7:02 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] AW: Re: OT: AD Policy hi neil nope - can't access the policy at all. when i set the permissions i also removed read permission for all groups. seems like neither domain admins nor group admins can view or edit it. i found out the policies' id and tried to change permissions on the folder under sysvol but this didn't help :( ________________________________ Von: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx] Gesendet: Freitag, 31. Oktober 2003 15:20 An: thin@xxxxxxxxxxxxx Betreff: [THIN] Re: OT: AD Policy -----Original Message----- From: Sascha [mailto:sascha.pape@xxxxx] Sent: 31 October 2003 14:11 To: thin@xxxxxxxxxxxxx Subject: [THIN] OT: AD Policy hi all i edited my users' ad policy to make loopback work. stuipid me, but i set permissions on the policy itself to deny access to all - including domain admins. of course now i can't open or view the policy. anyone know how to restore the permissions? thanks in advance! Can you change the owner to (a) domain admin for the GPO? Neil *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm