Admin can't access any folders and settings on Win Server 2008, Resetting Group Policy

i have setup group policy user restrict him of viewing disk drives , running programs except one.

settings in group policies applied:

• prevent access drives computer
• run specified windows applications

unfortunately, reason settings applied local users including local admin. server not in domain.

i have 1 administrator account , 1 user.

now when i'm login administrator, can't run program including regedit, andgroup policy management console. can't access disc drives, restore up, , on.

the software allowed to run, has .exe file format, theoretically can rename executable file name run, again can't access directory it.

help, please!

hi,

in such scenario, recommend reinstall os fix issue.

but may have try below workaround.

some details need know:

> the software allowed to run, has .exe fie format

what’s os version of server?

what’s allowed software have defined in “run specified windows application” policy?  this policy prevents users form running programs started windows explorer process. not prevent users form running programs started system process or other processer. also, if users have access command prompt, cmd.exe, policy not prevent them starting programs in command windows not permitted start using windows explorer.

so first question here can start cmd.exe?

if no, boot windows pe delete file specified in restrict policy (we assume notepad.exe), rename com.exe notepad.exe

restart pc , log in administrator account, run notepad.exe start cmd prompt. run regedit.exe start registry editor, delete registry hive “hkey_current_user\software\microsoft\windows\currentvsersion\policies\explorer”.

launch taskmgr.exe in cmd prompt, end process “explorer”, new task (run) “explorer”.

now can start local group policy editor (gpedit.msc) stop defined policies.

don’t remember modify “notepad.exe” cmd.exe , copy “notepad.exe” form other pc.

---

lawrence

technet community support

Windows Server  >  Group Policy