A GPO was created and linked to top level that denies login to domain admins. No other accounts are able to log into domain controllers.
Is there a way to change this policy or somehow recover?
Right now I am faced with a large domain that is basically unmanageable since I have no way to log into DCs. DCs are Windows 2008r2 and clients are Windows 7. I can still log in to client machines. I do have puppet on the DCs and access to the puppet master.