Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > accidentally removed domain admin rights in security of a ..

accidentally removed domain admin rights in security of a ..

Forum Windows 2000/NT : Windows 2000/NT General Discussion - accidentally removed domain admin rights in security of a ..

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

I accidentally removed all domain admins from the security property of a GPO.
Now this GPO is read-only from all and can not be modified. Any ideas how
to fix this? There is a security group called System that has full admin
rights tp this GPO. How can add myself to this group?

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

"TJ16" wrote:
> I accidentally removed all domain admins from the security
> property of a GPO.
> Now this GPO is read-only from all and can not be modified.
> Any ideas how
> to fix this? There is a security group called System that has
> full admin
> rights tp this GPO. How can add myself to this group?

Hi,

I am not sitting in front of my DC so I am not sure if this is
possible, however CAN you get to an Ownership tab and take ownership?
That is the only way I know to recover from something like this.

The SYSTEM account is the local computer account. You can’t add
yourself to it.

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group [...] 54508.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=784837

Reply to Anonymous

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Hi
you can obtain perrmisions via Active Directory.

first, check , what GUID of the GPO in property TAB .
open Active directory users and computers, make sure that advanced options
checked in view menu.
go down to Systam -> Policies. find your GUID of GPO and put perrmisions for
this object in security tab. wait some seconds and check if it works on GPO
properties

sorry for poor english....

"lforbes" wrote:

> "TJ16" wrote:
> > I accidentally removed all domain admins from the security
> > property of a GPO.
> > Now this GPO is read-only from all and can not be modified.
> > Any ideas how
> > to fix this? There is a security group called System that has
> > full admin
> > rights tp this GPO. How can add myself to this group?
>
> Hi,
>
> I am not sitting in front of my DC so I am not sure if this is
> possible, however CAN you get to an Ownership tab and take ownership?
> That is the only way I know to recover from something like this.
>
> The SYSTEM account is the local computer account. You can’t add
> yourself to it.
>
> Cheers,
>
> Lara
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's request
> Articles individually checked for conformance to usenet standards
> Topic URL: http://www.windowsforumz.com/Group [...] 54508.html
> Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=784837
>

Reply to Anonymous
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > accidentally removed domain admin rights in security of a ..
Go to:

There are 1335 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them