Accidentally denied Logon locally and remotely to Windows 2008 Domain

A coworker was trying to meet a government  security requirement and accidentally denied logon locally and remotely to the domain admin and enterprise admin groups in group policy for a Windows 2008 Domain.  The policy was applied to all the servers including the domain controllers.  Now all of our elevated accounts are locked out of the domain.  Is there a way to hack the domain gpo to remove the deny logon settings?

Thanks for any help