delete a GPO where Domain admin denied access

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Is there a way to get rid of a group policy where we cannot access. Someone
created a GPO and accidently set domain admin- deny. We have lowered its
priority and removed the link. Just wanted to clean it up/remove
permanently

thanks

CR

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

There is a few options here, Simply logon as Enterprise Admin if not same
issue appears there.

You can use ADSIEdit or dsacls to reset the permission of the GPO to the
default permission of the group policy class.

Group Polices are stored within Active Directory in the follow container.
CN=Policies,CN=System,DC=<domain>,DC=<xxx>


--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

"MS-News" <nospam@nowhere.com> skrev i meddelandet
news:O%23lcGV7OFHA.2736@TK2MSFTNGP09.phx.gbl...
> Is there a way to get rid of a group policy where we cannot access.
> Someone
> created a GPO and accidently set domain admin- deny. We have lowered its
> priority and removed the link. Just wanted to clean it up/remove
> permanently
>
> thanks
>
> CR
>
>