This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Good day... A coworker tried to set up role-based access using our domain accounts, following a YouTube video (https://www.youtube.com/watch?v=VO2P6MiniM4). Shortly after, he was logged out, and now none of us can log into any domain-joined workstations with admin accounts. Regular domain users are able to login without a problem. The following was what he selected and applied as viewed to Domain Admins and Enterprise admins.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Log on directly to the console - not via Remote Desktop.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin
Hi Marcin, Thank you for the reply. The deny access was also included from the network, not just RDP. I'm still trying to understand how the admin actually managed to update the default policy. I found 2 policies and was able to delete the other that only contained the Domain Admins, but this one is not as simple due to it being the domain policy. I'm thinking of resetting the Default Domain policy, but not sure if using DSRM on Win Server 2022 will work.
