 |
|
 |
|
Next: Max RAM for Presario 3800+
|
| Author |
Message |
External

Since: Aug 07, 2007 Posts: 3
|
(Msg. 1) Posted: Tue Aug 07, 2007 9:16 am
Post subject: Local Group Policy Archived from groups: microsoft>public>windowsxp>security_admin (more info?)
|
|
|
Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
XP Pro for patients to use. Well i don't want it joined to our server 2k3
domain just a workgroup and some local GPO's. I didnt think when i was going
through and setting my GPO settings that i was locking my admin account down
as well. But i have i realized it this morning when i remembered i wanted to
modify something. Logged in as admin and can't do much. I can not undo the
GPO because i set do not open mmc in author mode  .
I need to figure out how to remove the gpo settings from the admin account
or anyway to undo settings so i can administer the PC again.
Thanks
LeRoy,
CIW,A+,Net+,MCP,MOS >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Aug 03, 2007 Posts: 4
|
(Msg. 2) Posted: Tue Aug 07, 2007 1:22 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
LeRoy Vanek wrote:
> Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
> XP Pro for patients to use. Well i don't want it joined to our server 2k3
> domain just a workgroup and some local GPO's. I didnt think when i was going
> through and setting my GPO settings that i was locking my admin account down
> as well. But i have i realized it this morning when i remembered i wanted to
> modify something. Logged in as admin and can't do much. I can not undo the
> GPO because i set do not open mmc in author mode .
> I need to figure out how to remove the gpo settings from the admin account
> or anyway to undo settings so i can administer the PC again.
>
> Thanks
>
> LeRoy,
> CIW,A+,Net+,MCP,MOS
Sounds like a challenging one there, maybe you should try to disable GPO
functionality in the registry editor:
* Create DWORD DisableGPO if it doesnt exist in location
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
* Give your newly created registry key the value 1 (default value is 0
which means the functionality is enabled)
* Restart computer
* Change/remove troublemaking GPO(s) in question
Hopefully this will help. >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Aug 07, 2007 Posts: 3
|
(Msg. 3) Posted: Tue Aug 07, 2007 1:22 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
is there a way to edit registry besides using run command? as it is also
removed from my start menu as admin or a user account
"Leander de Graaf" wrote:
> LeRoy Vanek wrote:
> > Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
> > XP Pro for patients to use. Well i don't want it joined to our server 2k3
> > domain just a workgroup and some local GPO's. I didnt think when i was going
> > through and setting my GPO settings that i was locking my admin account down
> > as well. But i have i realized it this morning when i remembered i wanted to
> > modify something. Logged in as admin and can't do much. I can not undo the
> > GPO because i set do not open mmc in author mode .
> > I need to figure out how to remove the gpo settings from the admin account
> > or anyway to undo settings so i can administer the PC again.
> >
> > Thanks
> >
> > LeRoy,
> > CIW,A+,Net+,MCP,MOS
>
> Sounds like a challenging one there, maybe you should try to disable GPO
> functionality in the registry editor:
>
> * Create DWORD DisableGPO if it doesnt exist in location
> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
> * Give your newly created registry key the value 1 (default value is 0
> which means the functionality is enabled)
> * Restart computer
> * Change/remove troublemaking GPO(s) in question
>
> Hopefully this will help.
> >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Aug 03, 2007 Posts: 4
|
(Msg. 4) Posted: Tue Aug 07, 2007 2:20 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
LeRoy Vanek wrote:
> is there a way to edit registry besides using run command? as it is also
> removed from my start menu as admin or a user account
>
>
> "Leander de Graaf" wrote:
>
>> LeRoy Vanek wrote:
>>> Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
>>> XP Pro for patients to use. Well i don't want it joined to our server 2k3
>>> domain just a workgroup and some local GPO's. I didnt think when i was going
>>> through and setting my GPO settings that i was locking my admin account down
>>> as well. But i have i realized it this morning when i remembered i wanted to
>>> modify something. Logged in as admin and can't do much. I can not undo the
>>> GPO because i set do not open mmc in author mode .
>>> I need to figure out how to remove the gpo settings from the admin account
>>> or anyway to undo settings so i can administer the PC again.
>>>
>>> Thanks
>>>
>>> LeRoy,
>>> CIW,A+,Net+,MCP,MOS
>> Sounds like a challenging one there, maybe you should try to disable GPO
>> functionality in the registry editor:
>>
>> * Create DWORD DisableGPO if it doesnt exist in location
>> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
>> * Give your newly created registry key the value 1 (default value is 0
>> which means the functionality is enabled)
>> * Restart computer
>> * Change/remove troublemaking GPO(s) in question
>>
>> Hopefully this will help.
>>
Is the command prompt also disabled? If it is you have succeeded in
locking yourself out. There is a way to run commands with a custom made
shell which i got source code on, but you are probably better off
reinstalling the machine as it sounds like you lost any control of it. >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Aug 07, 2007 Posts: 3
|
(Msg. 5) Posted: Tue Aug 07, 2007 2:20 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
oh ya i took away there command propt also  mine went away along a/them....
"Leander de Graaf" wrote:
> LeRoy Vanek wrote:
> > is there a way to edit registry besides using run command? as it is also
> > removed from my start menu as admin or a user account
> >
> >
> > "Leander de Graaf" wrote:
> >
> >> LeRoy Vanek wrote:
> >>> Ok, I work for local hospitol in ohio. Yesterday i was setting up a PC with
> >>> XP Pro for patients to use. Well i don't want it joined to our server 2k3
> >>> domain just a workgroup and some local GPO's. I didnt think when i was going
> >>> through and setting my GPO settings that i was locking my admin account down
> >>> as well. But i have i realized it this morning when i remembered i wanted to
> >>> modify something. Logged in as admin and can't do much. I can not undo the
> >>> GPO because i set do not open mmc in author mode .
> >>> I need to figure out how to remove the gpo settings from the admin account
> >>> or anyway to undo settings so i can administer the PC again.
> >>>
> >>> Thanks
> >>>
> >>> LeRoy,
> >>> CIW,A+,Net+,MCP,MOS
> >> Sounds like a challenging one there, maybe you should try to disable GPO
> >> functionality in the registry editor:
> >>
> >> * Create DWORD DisableGPO if it doesnt exist in location
> >> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
> >> * Give your newly created registry key the value 1 (default value is 0
> >> which means the functionality is enabled)
> >> * Restart computer
> >> * Change/remove troublemaking GPO(s) in question
> >>
> >> Hopefully this will help.
> >>
>
> Is the command prompt also disabled? If it is you have succeeded in
> locking yourself out. There is a way to run commands with a custom made
> shell which i got source code on, but you are probably better off
> reinstalling the machine as it sounds like you lost any control of it.
> >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Nov 10, 2007 Posts: 959
|
(Msg. 6) Posted: Tue Aug 07, 2007 3:16 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Take a look at Bart's PE. This creates a bootable disk, that will run
independently of the hard disk. You can also run Command Prompt, Regedit and
other utilities directly from the GUI.
http://www.nu2.nu/pebuilder/
You may also want to look at Ultimate Boot CD (UBCD)
http://www.ubcd4win.com/
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"LeRoy Vanek" <LeRoyVanek.TakeThisOut@discussions.microsoft.com> wrote in message
news:3E1426CD-0432-4CA8-B7EB-416456369779@microsoft.com...
> oh ya i took away there command propt also mine went away along
> a/them....
>
> "Leander de Graaf" wrote:
>
>> LeRoy Vanek wrote:
>> > is there a way to edit registry besides using run command? as it is
>> > also
>> > removed from my start menu as admin or a user account
>> >
>> >
>> > "Leander de Graaf" wrote:
>> >
>> >> LeRoy Vanek wrote:
>> >>> Ok, I work for local hospitol in ohio. Yesterday i was setting up a
>> >>> PC with
>> >>> XP Pro for patients to use. Well i don't want it joined to our server
>> >>> 2k3
>> >>> domain just a workgroup and some local GPO's. I didnt think when i
>> >>> was going
>> >>> through and setting my GPO settings that i was locking my admin
>> >>> account down
>> >>> as well. But i have i realized it this morning when i remembered i
>> >>> wanted to
>> >>> modify something. Logged in as admin and can't do much. I can not
>> >>> undo the
>> >>> GPO because i set do not open mmc in author mode .
>> >>> I need to figure out how to remove the gpo settings from the admin
>> >>> account
>> >>> or anyway to undo settings so i can administer the PC again.
>> >>>
>> >>> Thanks
>> >>>
>> >>> LeRoy,
>> >>> CIW,A+,Net+,MCP,MOS
>> >> Sounds like a challenging one there, maybe you should try to disable
>> >> GPO
>> >> functionality in the registry editor:
>> >>
>> >> * Create DWORD DisableGPO if it doesnt exist in location
>> >> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
>> >> * Give your newly created registry key the value 1 (default value is 0
>> >> which means the functionality is enabled)
>> >> * Restart computer
>> >> * Change/remove troublemaking GPO(s) in question
>> >>
>> >> Hopefully this will help.
>> >>
>>
>> Is the command prompt also disabled? If it is you have succeeded in
>> locking yourself out. There is a way to run commands with a custom made
>> shell which i got source code on, but you are probably better off
>> reinstalling the machine as it sounds like you lost any control of it.
>> >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
External

Since: Mar 12, 2005 Posts: 877
|
(Msg. 7) Posted: Tue Aug 07, 2007 3:17 pm
Post subject: Re: Local Group Policy [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
In news:19DCEC01-A1DF-475C-A481-82D3F996FFEA@microsoft.com,
LeRoy Vanek <LeRoyVanek.DeleteThis@discussions.microsoft.com> wrote:
> Ok, I work for local hospitol in ohio. Yesterday i was
> setting up a PC with
> XP Pro for patients to use. Well i don't want it joined to
> our server 2k3
> domain just a workgroup and some local GPO's. I didnt think
> when i was going
> through and setting my GPO settings that i was locking my
> admin account down
> as well. But i have i realized it this morning when i
> remembered i wanted to
> modify something. Logged in as admin and can't do much. I can
> not undo the
> GPO because i set do not open mmc in author mode .
> I need to figure out how to remove the gpo settings from the
> admin account
> or anyway to undo settings so i can administer the PC again.
>
> Thanks
>
> LeRoy,
> CIW,A+,Net+,MCP,MOS
Once you get this sorted out you might want to consider using
this program from Microsoft instead of the local security
policy.
Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
Good luck
Nepatsfan >> Stay informed about: Local Group Policy |
|
| Back to top |
|
 |  |
| Related Topics: | Local Group Policy - I am wanting to lock down a local PC, which is in a workgroup, to were all the user can do is click on one icon, which starts a certain application. I do not want them to see anything else. It is a hassle trying to figure out all the options to enable...
Group policy local group not admin as well ? - I'm a newbie who just made a group policy for a user and changed local settings, this changed the administrator settings as well, how do I change user1 (power user) local settings on a workgroup computer without admin being changed? I have read heaps...
Deploy Local Group Policy - We have 250 mobile users that do not connect to a domain yet. Our infrastructure is migrating to AD, but we still are a year or so away. In the meantime we need to deploy 250 laptops. We have 5 difference version of the Panasonic CF-29 unit. ..
Group Policy error pop-up when editing local policy - I just completed a "distructive" recovery on my home desktop that uses XP pro. Unfortunately, I am undergoing a host of odd issues i didn't expect by doing a complete recovery, anyway that's another cluster I'm dealing with. Anyhow, my curr...
Local Group Policy to lockdown saved files on Desktop & My.. - Guys, I am using the gpedit.msc (locally) to lock down our terminal server 2003. I have removed "My Document" from the desktop. But when a user opens a doc and save as, he/she still can save it to it. How can I remove/hide it? Also, how d... |
|
You can post new topics in this forum You can reply to topics in this forum You can edit your posts in this forum You can delete your posts in this forum You can vote in polls in this forum
|
|
|
|
 |
|
|