You should be able to open an MMC and load the GPOE and override the old GPO with a local GPO.
Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael Link with me at: http://www.linkedin.com/in/theessentialexchange -----Original Message----- From: Kaiser, Charlie [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 18, 2008 4:14 PM To: NT System Admin Issues Subject: Group Policy sticks after domain migration Scenario: W2K3 native mode AD domain (domain1) W2K Terminal server locked down with GPO (computer configuration, administrative templates, Start Menu and taskbar (among many others)) that applies to auth users. Second GPO that disables all those lockdowns that applies only to domain admins and enterprise admins. Works fine. Users get nothing except the app, domain admins get everything. Problem: Domain migration project. Move all member servers to W2K3 native mode AD domain (domain2). Now GPOs from domain 1 are still applied. Server admins cannot get into the box. Login and get locked down desktop. Domain admins in domain2 can get in fine, but now local admins group needs access. Gpresult doesn't show the settings being applied. No apparent way to remove. Any ideas? I'm thinking move the box back to domain1, remove GPO and force, verify access, and then move back to domain2... Any other ideas? Thanks! ********************** Charlie Kaiser W2K3 MCSA/MCSE/Security Systems Engineer 925 274 3183 desk 925 890 3517 cell ********************** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
