+ Post New Thread
Results 1 to 11 of 11
Windows Server 2000/2003 Thread, Modifying GPO - Access Denied in Technical; To All, I am trying to modify a GPO at the moment on a 2003 DC (plans to get rid ...
  1. #1
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52

    Modifying GPO - Access Denied

    To All,

    I am trying to modify a GPO at the moment on a 2003 DC (plans to get rid of that is being made already) all I want to do is turn off the "move current content" settings in the Folder Redirection policies to see if it speeds up logon (as with verbose mode turned on it seems to spend a good 15-20 seconds on applying folder redirection) but whenever I do the change and click apply I get an Accessed is Denied Message, I am a member of Domain Admins and I have looked through the delegation settings for security but I cannot seem to find anything obvious stopping me. Has anyone had this before?

    Thank you all in advance,

  2. #2

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,104
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    I haven't played with this for a while - I've always made sure that option was firmly off, along with 'Grant user exclusive permissions'. It's the latter I'd be wondering about here - can you access and browse the folder in question via UNC path as your logged in user?

  3. Thanks to 3s-gtech from:

    BKGarry (22nd August 2014)

  4. #3
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52
    Oops should have been more specific, the issue isn't the GPO applying, all the redirection is working, but I want to modify the GPO itself in the GPMC but that is where it is saying access is denied, when I try and click apply there.

  5. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,104
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    Rather odd! Can you edit any other settings within that GPO? I'm wondering if the actual permissions on the policy object in the sysvol are perhaps wrong.

  6. #5
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52
    All that is in this GPO are those settings, it is rather annoying, there seems to be a Policy Object for every different setting going (I will have to combine them later as it is annoying the hell out of me) but I can access all the sysvol and sub folders within it (double checked the ID)

  7. #6

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,104
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    Can you set this policy within another GPO and ditch this one?

  8. #7
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52
    I am a little bit scared to do so, this is an old BSF Active directory and I have done that before with something else and it seemed to just go horribly wrong. I really want to save that as my last resort

  9. #8

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,104
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    No harm in just unlinking the GPO rather than deleting it. It does sound like there are some issues with the GP/AD/domain though!

  10. #9
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52
    Well I created a new GPO imported the settings and I can modify it, looks like I will have to do this way, oh well

  11. #10
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    1,018
    Thank Post
    105
    Thanked 144 Times in 114 Posts
    Rep Power
    52
    OK, unlinked old Policy, new one allowed me to edit the settings, and now has sped up my login by 20 seconds, :-) next step is to start almagamating all the GPOs into one for Students and One for staff, it will make things a lot easier I think :-)

    Thank you so much for yout help

  12. #11
    Gabriel177's Avatar
    Join Date
    Sep 2014
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I believe you need to create a user with the credential of an Enterprise Administrator in order to make must of the changes in windows 2003. I would get back and will reply because right now it is late 12:23 am and will research more on the subject on GPO modification..



SHARE:
+ Post New Thread

Similar Threads

  1. Photostory Access denied error.
    By ICT_GUY in forum Windows
    Replies: 20
    Last Post: 10th February 2010, 12:03 PM
  2. Censornet Access Denied Page Edit
    By HallX in forum *nix
    Replies: 4
    Last Post: 12th March 2007, 10:05 AM
  3. Replies: 2
    Last Post: 13th June 2006, 10:22 PM
  4. Access Denied from Admin Network
    By MrDylan in forum ICT KS3 SATS Tests
    Replies: 9
    Last Post: 25th April 2006, 01:09 PM
  5. GPMC "Access Denied" for Administrator
    By Gatt in forum Windows
    Replies: 9
    Last Post: 8th February 2006, 07:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •