Lost User Rights to Default Domain Policy

[Mikoyan]

Hey people,

Having a problem...I stupidly while testing settings took out the Authenticated Users setting from Permission on the Default Domain Policy...

As soon as I did this the Default Domain Policy went 'inaccessible'

Have added a picture of what I am seeing..for some reason in ADSI Edit the default domain policy Unique ID is now listed as a text file.

Is there a way I can turn this back into a Group Policy Object?

To add this all went wrong as soon as I took read rights of Authenticated Users from the Default Domain Policy..I know big mistake..live and learn I guess :/

Please help anyone?

 

[Rob7865]

Are you sure all you did was remove Authenticated Users? If, so you should be able to restore the Security settings by going into the PROPERTIES>SECURITY>ADVANCE>RESTORE DEFAULTS.

If you've done more then just remove the Authenticated Users, and you DIDN'T BACKUP the GPO, then try this (http://technet.microsoft.com/en-us/library/cc739095.aspx)

I see your running SBS 2003 - I know a lot of people discount SBS as not "REAL" server land technology, but you still have to treat it with the same respect (sometime more then) as you would a full blown Enterprise DC Setup. Don't just randomly play with things in a live environment, or if you do at least backup the parts before fiddling! (/Rant Over!!!)

Hope this helps - if not you may need to restore your SYSVOL (system state).

Rob

 

[Mikoyan]

Hi mate,

Seems to be resolved!!!

Yep no more messing with Default Domain Polcies ever again..have also created backups too lol!

It was just Authenticated users, have put all settings back to default.

Your rant is fair play, ive been told to never mess about with domain policies but I still did, thank god its sorted though

Thanks again for your help \/

edit: changed the permissions basically using the advanced view saw the ones that were deny and set to default.

 

[Rob7865]

Hi Mikonyan

Glad to hear all is ok!
Cheers

Rob