Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I just implimented stricter passwords via a new GPO. Unfortunately, I also managed to lose ownership of the GPO!
I didn't want the new policy to be active for Administrator. Because Administrator is an Authenticated User (and by default, new policies affect all authenticated users), I added Administrator to the GPO and checked DENY for Apply Group Policy. I guess I should have also made sure to check Allow for everything else while I was at it (like Write, Create and Delete).
I also deleted Domain Admins and Enterprise Admins from the policy. (On retrospect, this probably wasn't necessary - but I was thinking I'd still have control of the policy as Administrator.)
Of course, now everything in the GPO Security tab (while logged in as Administrator) is grayed out - meaning that I have no permission to make any further changes!
I would like to see if there is a way to regain control of this GPO. If I right-click on the policy, there are normally two options given: 1.) Remove the link from the list, and 2.) Remove the link and delete the Group Policy Object permanently. Option number TWO is now grayed out.
I thought, if worse comes to worse, I have already re-created the GPO (and left Domain Admins and Enterprise Admins as is). However since I can apparently only remove THE LINK and not delete THE OBJECT permanently, I'm thinking that I will just be digging myself in deeper! I am loathe to simply remove the link to this GPO. (Wouldn't it still be active for all users?)
If I go into properties on the GPO and click the Security tab and click the Advanced button and then the Owner tab, I can see that the GPO is still owned by Domain Admins. And upon examining Administrator, I see that Administrator is already a member of Domain Admins (and Enterprise Admins too). But that fact doesn't seem to get me anywhere.
Also the user group named "System" still has Read, Write, Create and Delete permission to the GPO. Again, I am not sure how that can help me either.
Please let me know if anyone knows a way to back out of this corner that I have painted myself into. Thanks!

![]() |
windows socket error
|
Need help cleaning up com...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |