Disable GPO Via Command Line
Posted 07 June 2011 - 07:18 PM
Posted 08 June 2011 - 01:02 AM
The "other way" that i wouldn't try, would be remove those computers from domain (then reboot them), install your A/V, then read them to the domain.
Posted 09 June 2011 - 04:48 AM
Posted 09 June 2011 - 05:09 AM
We use link enabled GPO's, so this might be the clincher for you (and why you ought to use them). Check out this Technet document.
As for the other way around, well, you do the equivalent of something I would do. I disconnect the computer from the network. I then remove the +H attribute off the %WinDir%\System32\GroupPolicy folder. Then, I just rename the folder, then run gpupdate /force. This obviously is a nasty kludge, but I often in my career had to quickly determine if GP was causing a configuration problem, an admin with button-mashing, a user, or a combo. This was a quick way to tell if GP was a culprit when I exhausted options. Might work for you, might not, and it is certainly not selective.
- ← Change Windows Shell with runonceex
- Unattended Windows 2000/XP/2003
- Irritating Problem while try install Windows xp →