How do I recover from this

[STLT11]

Hi All

I was wondering if anyone has any suggestions?

I work for a secondary school in the UK. I have 3 servers at present one PDC on 2K server, one BDC on 2k Server and one old NT4 server also acting as a BDC.

I upgraded the 2 x 2000 servers about a month ago.

The servers are currently running in mixed mode as we have some 2000 pro workstations and some nt 4 workstations. I am currently in the process of upgrading all of our labs to 2000 pro.

To organise the policies which need to be different for each lab I created some lab policies, and moved the computers into different organisational units, e.g. LAB1, LAb2, etc.

I applied the new policies to each lab with the no override setting enabled. These did not take effect, so after about 24 hours of them not taking effect I activated the new lab policy at domain level with no override. BAd mistake! I feel rather stupid now, as the policy has also taken effect ont he domain controllers (except the NT4 BDC) as well as our lab PCs. I understand what I have done, etc. and how stupid it was.

We currently backup on to travan tapes and both of our backup sets have been overwritten with the new system state so I cannot restore it.

My question is. If I take both 2000 servers (1 x PDC, 1 x BDC) and promote our NT4 server to a PDC, if I then reinstall the 2000 servers once again will this resolve my problems?

Any help would be apprecieated.

Lee

 

[SuperJon]

Lee,

I think what you are suggesting may be a bit drastic.

Can you not log on as administrator and remove the domain policy ?

If not why ? MCSE NT4 MCSA 2000/XP CCNA CCDA

 

[tlcscousin]

log on as enterprise admin and edit the policy and uncheck the no override if that doesnt allow you to do so then add the adminpak.msi to a client and do it remotely as the admin

 

[STLT11]

I can't do either of these suggestions. When I log on with my enterprise account. user and computers is blocked because of the policy i set.

When I log in as the local administrator I cannot access my users and computers either.

I have found some articles on microsoft's web site that tell you how to reset any amended default policy back to the default settings, but i removed the default policy and used the new one i created in its place. Stupid I know, not had any formal 2000 server training, just what I learnt myself. Do you think what I suggested earlier will work?

Thanks for your help so far guys.

Lee

 

[wbg34]

If it is a domain controller then you wont be able to access my users and computers. You will need to make your changes in start --> Programs --> Administrative tools --> Active Directory Users and Computers.

 

[STLT11]

start --> Programs --> Administrative tools --> Active Directory Users and Computers.

That's what I meant, sorry!

Writing these emails from our NT server.

Lee