Geeks With Blogs
Cajun MCSE MS technology down on the bayou March 2010 Entries
Modifying AD Schema permissions from the command line
Recently while making some changes for a client, I accidently dug myself into a pretty deep hole. I was trying to explicitly deny a certain user from reading a few group policies including the Default Domain Policy. When I went in to make the change I accidently denied Authenticated Users rather than the AD user object. This of course made the GPO inaccessible to all users including any with domain admin rights. The policy could no longer be modified in the GPMC and worse, changes could not be made ......

Posted On Friday, March 5, 2010 4:00 PM

Copyright © Ryan Roussel | Powered by: