Windows Admin Sign-in

Removing Group Policies from a MTR

This is more of an internal note to remind myself of some attempts to recover the MTR if a user joined it to a domain. It may or may not work for you.

Remember to reboot after each change

Option One

  • Start > Run > gpedit.msc
  • Check Local Computer Policy > Computer Configuration > Administrative Templates > All Settings and set to Not Configured
  • Check Local Computer Policy > User Configuration > Administrative Templates > All Settings and set to Not Configured

Option Two

  • Open an elevated command prompt
  • secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

Option Three

  • RD /S /Q “%WinDir%\System32\GroupPolicyUsers”
  • RD /S /Q “%WinDir%\System32\GroupPolicy”
  • gpupdate /force

Option Four

Note: Please be sure to back up the files before deleting them.

  • %systemroot%\system32\GroupPolicy\User\registry.pol
  • %systemroot%\system32\GroupPolicy\Machine\registry.pol

Also, delete the keys under the following entries: (do this through the command line if you’ve locked yourself out of regedit aswell)

  • HKCU\Software\Policies
  • HKLM \Software\Microsoft\Windows\CurrentVersion\Policies
%d bloggers like this: