none
Locked out by Group Policy

    Question

  • I added the domain admin group to "Deny logon Locally" in group policy and now I can't login with the admin account to any pc or server. Is there a way to bypass group policy to where I can login on the DC with the domain admin account? I have access through a share to the DC C: drive. What happens if I rename or delete the GPT folders in SYSVOL? I am trying to keep from rebuilding my DC. Any help would be great. Thanks.
    Friday, February 06, 2015 6:41 PM

Answers

  • > drive. What happens if I rename or delete the GPT folders in SYSVOL? I
    > am trying to keep from rebuilding my DC. Any help would be great. Thanks.
     
    If you have write access to the sysvol share: Open gpmc, navigate to
    your GPO and identify its GUID. Then on sysvol, delete the folder with
    this GUID. Reboot the DC, logon and delete the GPO itself.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Monday, February 09, 2015 9:31 AM

All replies

  • Do you have any memberserver?

    If, log in as local admin, open gpmc.msc (add feature if required) using 'run as' and remove the gpo


    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

    Saturday, February 07, 2015 11:14 AM
  • > drive. What happens if I rename or delete the GPT folders in SYSVOL? I
    > am trying to keep from rebuilding my DC. Any help would be great. Thanks.
     
    If you have write access to the sysvol share: Open gpmc, navigate to
    your GPO and identify its GUID. Then on sysvol, delete the folder with
    this GUID. Reboot the DC, logon and delete the GPO itself.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Monday, February 09, 2015 9:31 AM