I recently accidently set added Authenticated Users = Deny Read on GPO object. As ‘Deny’  ACEs take priority over ‘Allow’ everyone was blocked including Domain and Enterprise Administrators! After some research, trial and error we found that the following procedure can be used to … Continue reading Restoring permissions on an AD objects to Domain/Enterprise Administrators