run the administration tools (active directory snap-in) from a workstation
that is not part of the domain hence does not have the group policy
applied.
this "MAY" get around it but i fear the policy will still affect the user
which resides on the domain.
could you run ntdsutil to somehow remove the GPO ?
thanks,
Scott Lever - MCP, MCSA
IT Specialist, IBM CLS Project
Windows NT Team
IBM UK Ltd, Portsmouth - MailPoint F3J
Email: [EMAIL PROTECTED]
Mobx: 279230
Desk: 255079
Mobile: 07740 830 169
"C.Rajagopalan"
<[EMAIL PROTECTED]> To: "NT 2000 Discussions"
<[EMAIL PROTECTED]>
Sent by: cc:
bounce-nt2000-218395@l Subject: HELP - MMC Snap-Ins not
Accessible !
s.swynk.com
12/03/2002 10:59
Please respond to "NT
2000 Discussions"
Dear List Members:
As an Administrator, in order to restrict the Users, I have set the
following Group Policy properties in a Windows 2K Adv
Server Domain Controller:
1. Hide Active Directory from Users - Enabled.
2. Restrict the User from entering author mode in MMC - Enabled.
3. Restrict Users to the Explicitly permitted list of snap-ins in MMC -
Enabled.
I enabled the 3rd property after carefully reading the explanation which
says:
"If you enable this policy, and do not enable any policies in the
Restricted/Permitted snap-ins folder, users cannot use any
MMC snap-ins."
I have NOT explicitly permitted any snap-in to be used with the MMC for the
Users.
I did this thinking that it will affect only the Users - that's what the
Explanation says.
But now, I'm unable to access any of the snap-ins including Group Policy
myself as an Administrator.
Any help to reverse this would be greatly appreciated - I have some
machines
waiting for configuration - but I'm unable to
access any of the snap-ins from either the Win 2K Pro clients (connected to
the DC) or from the DC itself.
Thanks in advance.
Sincerely,
C.Rajagopalan
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
