Administrator locked out

O.K. big boo boo here. I should have set up an O.U. but didn't.....

Situation is that I have totally locked down the the TS users control with GPEDIT (Administrator included) so now I can not run GPEDIT to undo what I have done.

The only way I can now control the server is to alter the security tab in properties of the file GPT.INI to "deny ". In this way I do get total control of the server but have now denied myself access to the GPEDIT.msc file.

You can see I am caught in a catch 22 position

Can anybody help as I have about 15 TS users I need to control ...???

Thanks

 

Local group policy or domain?

Which version of terminal services?

 

Thanks NEWT I should have provided that, sorry....

It is a 2003 Server using a local group policy

Hope you can help....?

 

LOL - I did the same thing and didn't ask for all I needed to know.
- Is the server on a domain or workgroup?
- If workgroup, is there a friendly domain around you could join for a little while (hour or so)?
- If workgroup and no handy domain, how much hassle would it be to just slick the box and reload the OS?

I'm trying to figure out the simplest approach here.

 

Thanks for your reply

Yes to workgroup and we could connect them to our domain through VPN.

I can see where your coming from, but would be grateful if you could expand.

 

Have you tried connecting from a remote machine using:

gpedit.msc /gpcomputer: computername

or may be rename or make a copy of gpedit.msc somewhere else.

 

I think the remote gpedit (see Angel71's post) should do it if you have the PC on a domain and use a domain admin connection.

 

Thanks Angel71 & Newt

It worked a treat...........