Jump to content

Recommended Posts

Posted

Schoolboy error alert

 

For this, I am truly embarrassed and ashamed.

A computer that was domained but now will be working as a standalone. I decided I'd impose some restrictions so jumped into gpedit and off I went.

Smiled with glee as I stopped people doing this, that and the other. I felt the power. It was immense...

 

 

... until I rebooted and the sudden realisation that everything had also applied to the local administrator account.

Nothing.

No Run, no C: drive, no Win+R. Nothing.

This computer is now useless to me.

 

My name is Paul and I am a total numpty.

  • Thanks 1
Posted

The great thing about IT is that you can "have a blonde moment" and no one will know (unless you post it on Edugeek!).

 

Lost count of the amount of times i've scratched my head over things - why isnt the PC starting (plug the effing PSU in), my remote connection to the server dropped (I've changed network details) etc etc.

 

On your note - can you not boot into something like BartPE and tinker with reg settings? might save some time over a fresh rebuild.

Posted

Everything is saved in the registry, if you've disabled registry editing you will be able to resolve it,

 

[Version]
Signature=$CHICAGO$

[DefaultInstall]
DelReg=Del.Settings

[Del.Settings]
HKLM,Software\Bla\bla


 

Copy and paste and save it as an inf file. Go your limited PC right click on the file and select install. Now press ctrl + alt + del and kill explorer.exe, then start a new one. All policies will now be removed until you reboot :)

  • Thanks 2
Posted

What better opportunity to try and hack the computer?

 

You can make sure it's properly locked down and see if it's possible to change settings as a normal user with no access to a local/domain admin account.

Posted
What better opportunity to try and hack the computer?

 

You can make sure it's properly locked down and see if it's possible to change settings as a normal user with no access to a local/domain admin account.

 

..and if anyone asks, that is why you have set the machine like that - so you can test user access.......:)

Posted
..and if anyone asks, that is why you have set the machine like that - so you can test user access.......:)

 

TBF, this is something that should be tested from time to time.

Posted (edited)

rename c:\windows\system32\grouppolicyusers and c:\windows\system32\grouppolicy from winpe .

 

Reboot and hopefully gp should be defaulted.

 

If its win 7 create a mmc just for non admins.

Edited by free780
Posted
Lol thats reminds what I have done too

 

I have same the same thing on a mac when I was trying to setup restrictions on the Profile Manager. Had to reload it :( What a pain!

 

I did that! not the brightest moment ive had

Posted

Pffft for far worse my techie asked me yesterday morning if I'd heard any news about Muhammad Ali. Being before 8am and barely awake I just replied with "What class is he in again?"

 

I'm now the butt of all the jokes in school!

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...