Well, I will tell you about the easiest way to subvert Group Policy (my experience ranges with Windows XP, Vista, and 7 and it should work in principle with all of them).
First of all, you are going to need local Administrator privileges on the box in question. If you do not, you are going to have do this first (and if you get yelled at, not my problem).
- Burn the ISO of NTPassword Reset Disk. I am not explaining the instructions for that, because the instructions presented are very straightforward by the utility.
- Shut down the computer.
- Disconnect the ethernet connection for the time being.
- Boot your disk and reset the local Administrator account, or any local account with admin privileges.
- Reboot the computer.
Now, here is where the fun begins. Keep that ethernet connection disconnected.
- Log into the local account you just reset the password for after the reboot.
- Move the Group Policy folder. Copy and paste the following into a command prompt.
cmd /k move C:\Windows\System32\GroupPolicy GroupPolicy.arc
- Now reboot the machine.
Now, so far, you have cleared the local store of GP on this box. Now, if you reconnect, all that will happen is that it is certainly going to be re-applied on reboot. That is the pickle, my friend. Now, to move forward in this conondrum, you have only two choices really: move the computer object to an OU where it is not impacted by said GPO's or unjoin from the domain. Depending who you are at your organization, expect wrath from someone if you are not the right guy. So, if you decide to unjoin, which means also losing AD authentication (but I am sure you know that, do the following).
3a. Unjoin from the domain by copying pasting this from the command prompt.
cmd /k wmic computersystem where name!=null call unjoindomainorworkgroup. You can do it the GUI way, but I hate that. If it successful, the return value will be 0.
4a. Reconnect the ethernet cable and reboot the machine.
3b. Move it to the proper OU without interfering policy.
4b. Ethernet time, reconnect and reboot.
Now, I will not explain 3b. If you are an admin know what you are doing, I should not need to explain it. If you do not, you should probably not do this in the first place.