Ok, so we all have to learn the hard way every now and agian but I recon I have topped the list; Going through GP applying settings for users such as restricting hard drive access and disabling the changes of backgrounds etc all the usual to make things secure, I have managed to apply this to the administrator account and now cannot administer my server properly not having access to the hard drive and about 99% of Microsoft Snap-in Conolses are blocked? How can I reverse this process? It is the one and only server on that particualr netowrk so it is the PDC and only DC, its a Windows 2000 Server with SP4? Any help would be grealty appricated Bensley.

I hear you should be able to login under the Domain Adminstrator account and make the changes as the polices can not be set against this account. HTH Bryan

That should work, but I never actually knew about that one. On a Windows 2000 Pro client (in a Virtual Machine)I once added GPEDIT to the... blocked programs list >.< Got out of it by reformatting.        My blog

Bryco: Unfortunatly it has applied it to the domain administrator account, I wouldn't be logged on as the local admin because I wouldn't be able to administer the network propperly. AND, I cant log on as the local administrator account because the "log on to" option at start up only contains mydomain.local, no (this computer) option!!!! Celsius: Well that was my first thought as I don't believe there is anything I can do but thought I would hang on in case anyone had any ideas otherwise it will be an un-paid, un-nessesary weekend wasted, sitting in the cold server room restoring everything!!

I think perhaps a lesson to self and weekend in the cold server room restoring is in order.

:'( oh dear