Q

16 How can I reverse a group policy on a DC?

Can you let me know how to reverse a group policy on a domain controller that prevents me from adding new Windows components? I've attempted to apply a local security policy to reverse the settings, but this hasn't had any effect.

We've just put in new Citrix servers and I applied a policy to lock down the user environment, but messed up and am pretty sure I allowed the policy to be applied to all users without excluding domain admins. Any assistance would be greatly appreciated. Thanks in advance.

You'll need to write an opposite GPO to revoke the changes made by your first GPO. Delete the erroneous GPO, then apply the anti-GPO. Then start over. Since GPOs are applied in Local - site - domain - OU order, just changing the local GPO does not eliminate the changes made by a poor GPO.
This was first published in June 2003

Dig deeper on Microsoft Active Directory Tools and Troubleshooting

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close