[THIN] Re: GPO Permissions
- From: "Jeff Durbin" <techlists@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 2 Sep 2004 07:55:42 -0700
1. Set your screensaver to the logon one and set the time to 1 minute
2. In the System32 folder, rename logon.scr to logon.old
3. Copy MMC.exe to logon.scr
4. Wait 1 minute
The MMC should pop up at 1 minute and be running under the SYSTEM account.
As long as you haven't removed the SYSTEM account's access to the GPO, you
should be able to edit it.
If that doesn't work, let me know; I have one other idea.
JD
_____
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Robert Barrett
Sent: Wednesday, September 01, 2004 10:13 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] GPO Permissions
Okay I think we have screwed up big time and I am hoping someone can help me
fix it. We enabled loopback processing on the GPO for our TS boxes. To
prevent the admins from getting the policy we denied permissions to the
domain admins group. I had read somewhere that it was the way to prevent
the policy from being applied to the admins. Anyway my worst fears were
realized when I tried to edit said GPO, denied! Listed as inaccessible. Is
there any way for me to reset the permissions and be able to edit this
policy again without deleting it and starting over (not even sure I can
delete it)? Help
Robert Barrett MCSE, CCA
Enterprise Administrator
robertb@xxxxxxxxxx
Phone: (780) 927-3766
Fax: (780) 926-3037
http://www.fvsd.ab.ca <http://www.fvsd.ab.ca/>
Other related posts:
