Ask the Expert

16 How can I reverse a group policy on a DC?

Can you let me know how to reverse a group policy on a domain controller that prevents me from adding new Windows components? I've attempted to apply a local security policy to reverse the settings, but this hasn't had any effect.

We've just put in new Citrix servers and I applied a policy to lock down the user environment, but messed up and am pretty sure I allowed the policy to be applied to all users without excluding domain admins. Any assistance would be greatly appreciated. Thanks in advance.

Requires Free Membership to View

You'll need to write an opposite GPO to revoke the changes made by your first GPO. Delete the erroneous GPO, then apply the anti-GPO. Then start over. Since GPOs are applied in Local - site - domain - OU order, just changing the local GPO does not eliminate the changes made by a poor GPO.

This was first published in June 2003

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: