Administrator user, got restricted

March 12, 2012 at 04:31:00
Specs: windows 2003 server
Hi everyone,

I'm just a novice on Windows server and just learning through browsing, since our IT Officer already resigned. Anyway being an administrator user, I did some editing on the group policy object, but after I edit some policies, including disabling of the run command for the users, it also took effect in my account as an administrator. I made a very high restrictions including locking of all the drives. As a result, I can no longer change it since I cannot run anymore the gpedit.msc. Please advise on how to resolve this issue and how come that all the restrictions I made also took effect on my account.

Would really appreciate your kind help.

Many thanks.

See More: Administrator user, got restricted

Report •

March 12, 2012 at 05:03:16
Log on as the Domain Administrator and reverse your changes.

Report •

March 12, 2012 at 12:28:27
Sounds like he affected all administrator accounts.

reinstall and restore from backup is the usual way to address this that I am aware of.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's

Report •

March 12, 2012 at 14:54:16
An ordinary Administrator shouldn't be able to restrict the Domain Administrator, but you may be right. Re-install isn't needed, just restore Active Directory to a point before the changes were made. (Assuming that there are backups and the Active Directory restore password is known - without that you're stuffed.)

Report •

Related Solutions

March 13, 2012 at 01:44:20
Hi wanderer & ijack,

Thank you for your replies. I'm actually using a domain administrator. How am I going to restore, I mean How to do that? Really sorry for asking, as mentioned, I'm just a novice user. Many thanks again.

Report •

March 13, 2012 at 02:05:12
1. It's a very bad idea to use the Domain Administrator account for day-to-day tasks. It's better to create other Administrators and use those.

2. To restore Active Directory, first you must have a System State backup.

3. Assuming you have that, restart the server and press F8 to get the boot options menu. Select "Active Directory restore mode".

4. When the server boots you will need to log on with the Restore Mode password (essentially this is a local Administrator account that only exists in restore mode).

5. Restore the System State.

This link: describes the process of backing up and restoring Active Directory in more detail.

Report •

March 13, 2012 at 12:21:12
Everytime I have seen this kind of post the OP was never able to get back into the system to do any of the tasks needed to do a restore. After all if they knew this now they wouldn't have gotten into the situation to begin with.

Most never had backups let alone system state.

I would love this thread to be the exception

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's

Report •

Ask Question