I recently locked myself out of group policy management through Local Computer Policy > User Configuration > Administrative Template > Windows Components > Microsoft Management Console > Restrict users to the explicitly permitted list of snap-ins. My regedit is also disabled and I cannot access the group policy editor even though I am an admin. Please help me restore access. {E12BBB5D-D59D-4E61-947A-301D25AE8C23} is the SID I receive when trying to access group policy management. I did not know that these policies would apply to administrator accounts as well. Any help would be greatly appreciated.
2 Answers
You can use this powershell command to delete the RestrictToPermittedSnapins
registry value:
Remove-ItemProperty HKCU:\SOFTWARE\Policies\Microsoft\MMC -Name RestrictToPermittedSnapins
Then, do not reboot, open the group policy editor again and revert your change.
-
-
@byte69 You don't need access to regedit for this command to work... Nov 3, 2021 at 14:27
I ended up installing a third party group policy editor called Policy Plus (which is open source!) and I was able to enable the the group policy editor from there.