Group Policy is still in control! Windows XP

slipd · 5 Jul 2012 at 22:14

Hi guys,

I've got a formerly networked machine at work that I got from another department. I've removed all of the unwanted user accounts etc. and I am just left with the original administrators account, however I suspect that another user had installed group policy at some stage and has disabled a lot of features that I need; control panel, add/remove printers to name but two. I know I could just flatten it but I really need the software on it, so that isn't really an option

I've tried installing group policy as admin but I get the standard 'you do not have sufficient rights' message that you see in these situations...

Any ideas, I there anyway I can take control of this machine again?

Thanks.

Deleted member 77746 · 5 Jul 2012 at 22:15

Format it? then install the software on it again.

slipd · 5 Jul 2012 at 22:23

I haven't got access to a lot of the software mate, some of it was installed from floppy...

The machine is 100% I just need to join it to our domain which I can't do because I'm locked out of the control panel :mad:

There must be a 'Microsoft' way, surely?

Deleted member 77746 · 5 Jul 2012 at 22:36

if it's out of the domain what I would do is take a backup image of the hard disk and then go from there as the only way might be to format it.

slipd · 5 Jul 2012 at 22:38

mrbell1984 said:
if it's out of the domain what I would do is take a backup image of the hard disk and then go from there as the only way might be to format it.

There's no policy restore button or anything

quackers · 5 Jul 2012 at 22:42

have you got admin rights? Can you get to secpol.msc?

Deleted member 77746 · 5 Jul 2012 at 22:44

sam.wheale said:
There's no policy restore button or anything

No there won't be but if it's out of the domain it shouldn't be applying unless it's local group policy.

slipd · 5 Jul 2012 at 22:54

mrbell1984 said:
No there won't be but if it's out of the domain it shouldn't be applying unless it's local group policy.

Yep, its most definitely a local group policy...

slipd · 5 Jul 2012 at 22:56

quackers said:
have you got admin rights? Can you get to secpol.msc?

I'll try it tomorrow but I expect I'll get the usual message

Deleted member 77746 · 5 Jul 2012 at 22:58

if you can access run try gpedit.msc

slipd · 5 Jul 2012 at 22:59

mrbell1984 said:
if you can access run try gpedit.msc

I know I can't access that - that was the first thing I tried. I can't install gp again either.

Swordfish · 5 Jul 2012 at 23:00

Dial-a-fix can show up a list of local group policies that you can remove.

http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml

Only works on XP.

Sin_Chase · 6 Jul 2012 at 02:48

The domain admin account credentials might still be cached on the machine. Get one of the domain admins to log into it and remove the local policy via that account?

Sin_Chase · 6 Jul 2012 at 02:51

Also, why do you need cpanel to join it to a domain?

Right click Computer > Properties or Windows Key + Pause/Break.

Chances are if you cannot access the CP then you wont be able to join a new domain anyway but worth a go?

Dewotter · 6 Jul 2012 at 04:49

Sin_Chase said:
Also, why do you need cpanel to join it to a domain?

Right click Computer > Properties or Windows Key + Pause/Break.

Chances are if you cannot access the CP then you wont be able to join a new domain anyway but worth a go?

That will be blocked as System is an applet inside of Control Panel.

LizardKing · 6 Jul 2012 at 08:26

RKO said:
That will be blocked as System is an applet inside of Control Panel.

Could try using netdom

TBH reinstalling windows will be far less trouble than resetting all the policys that have been applied to the machine imo

Deleted member 77746 · 6 Jul 2012 at 09:28

sam.wheale said:
I know I can't access that - that was the first thing I tried. I can't install gp again either.

I bet your only way is to re-install and get a hold of the software again.