[THIN] Re: GPO Permissions
- From: "Robert Barrett" <RobertB@xxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 3 Sep 2004 08:42:47 -0600
I have it going for now, but I am putting that one in the save pile for
future reference. Thanks
Bob Barrett
FVSD#52
________________________________
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Jeff Durbin
Sent: Thursday, September 02, 2004 8:56 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: GPO Permissions
1. Set your screensaver to the logon one and set the time to 1 minute
2. In the System32 folder, rename logon.scr to logon.old
3. Copy MMC.exe to logon.scr
4. Wait 1 minute
The MMC should pop up at 1 minute and be running under the SYSTEM
account. As long as you haven't removed the SYSTEM account's access to
the GPO, you should be able to edit it.
If that doesn't work, let me know; I have one other idea.
JD
________________________________
From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Robert Barrett
Sent: Wednesday, September 01, 2004 10:13 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] GPO Permissions
Okay I think we have screwed up big time and I am hoping someone
can help me fix it. We enabled loopback processing on the GPO for our
TS boxes. To prevent the admins from getting the policy we denied
permissions to the domain admins group. I had read somewhere that it
was the way to prevent the policy from being applied to the admins.
Anyway my worst fears were realized when I tried to edit said GPO,
denied! Listed as inaccessible. Is there any way for me to reset the
permissions and be able to edit this policy again without deleting it
and starting over (not even sure I can delete it)? Help
Robert Barrett MCSE, CCA
Enterprise Administrator
robertb@xxxxxxxxxx
Phone: (780) 927-3766
Fax: (780) 926-3037
http://www.fvsd.ab.ca <http://www.fvsd.ab.ca/>
Other related posts:
