Accidentally modified The GPO permission and give deny access to Enterprise admin and domain administrators:
:In my test Environment I simulated the same.
I gave Full deny access to Authenticated users in default domain controller policy.
It can be corrected it by Start Active Directory users and computers(Dsa.msc). Choose View and select advanced features. browse to system \ policies. Select the guid starting with 6AC1 (that the default domain controller policy), open properties and select the security tab. click on advanced. There on the top of the list you should see the Deny permission for Administrator . Double click the entry and remove the "deny" permission.
Look at that. It's coming back:
Then I browse to Sysvol (the path will be like this: \\domain.com\SYSVOL\Domain.com\Policies).
In the security tab of policy, starting with 6AC1, I removed deny permission for the Administrator.
The policy is okay now.
Ed Price - MSFT edited Revision 2. Comment: Title, tags, some minor edits