This may help: http://www.jsifaq.com/SUBH/tip3800/rh3823.htm - Domain Administrators group fails to open a Group Policy Object If this doesn't work, you may need to see about copying the contents of the locked out policy to a new one. As I recall, someone has posted previously on how to copy an existing group policy to a new one. HTH J -----Original Message----- From: Pape Sascha [mailto:Sascha.Pape@xxxxx] Sent: Friday, October 31, 2003 7:02 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] AW: Re: OT: AD Policy hi neil nope - can't access the policy at all. when i set the permissions i also removed read permission for all groups. seems like neither domain admins nor group admins can view or edit it. i found out the policies' id and tried to change permissions on the folder under sysvol but this didn't help :( _____ Von: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx] Gesendet: Freitag, 31. Oktober 2003 15:20 An: thin@xxxxxxxxxxxxx Betreff: [THIN] Re: OT: AD Policy -----Original Message----- From: Sascha [mailto:sascha.pape@xxxxx] Sent: 31 October 2003 14:11 To: thin@xxxxxxxxxxxxx Subject: [THIN] OT: AD Policy hi all i edited my users' ad policy to make loopback work. stuipid me, but i set permissions on the policy itself to deny access to all - including domain admins. of course now i can't open or view the policy. anyone know how to restore the permissions? thanks in advance! Can you change the owner to (a) domain admin for the GPO? Neil *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************