broken group policy

Printable View

30th November 2010, 04:50 PM
fred54

broken group policy

Hi
Having a problem with a server 2008 single group policy which will not allow me to edit it. When I try to edit the policy I get the message 'Failed to open the group policy object. You may not have appropriate rights. Unspecified error.' It is the same problem from other machines or using other admin accounts but I can access and edit other policies OK. Obviously the policy for some reason is broken/ damaged so the obvious solution is to restore it. I have the system state backed up so do I restore active directory only or restore the full system state? is there potential for other problems by doing this? Or is there a better way of getting the group policy fixed? Thanks
30th November 2010, 04:53 PM
plexer

Do you have a backup of the gpo itself?

Can you get it to show the details for what the gpo does i.e the report?

Do you know what the gpo does i.e can you delete the broken one and recreate a new one with the same functionality?

Restoring the system state would be my last resort.

Ben
30th November 2010, 04:57 PM
sted

can gpmc list the setting contained in it. if so might be quicker to just copy them to a new policy
30th November 2010, 05:13 PM
glennda

what are the permissions of the gpo?
30th November 2010, 06:49 PM
witch

I have had this issue and TBH it is much quicker to recreate the policy. I couldnt even get a report so I had to do it from memory. Turned out OK though
I wouldnt try and restore anything frankly, IMO something is bound to go wrong :)
1st December 2010, 09:59 AM
Hedghog

oh so true!
1st December 2010, 03:33 PM
fred54

Hi Guys thanks for the advice - I got a report for the group policy and rebuilt it. I was worried something might go wrong with the restore but recreating the policy seems to have sorted it. Thanks again!
23rd December 2010, 08:53 PM
Bruce123

I know that this has already been dealt with, but I would hazard a guess that the permissions of one or more of the files/folders associated with the GPO had somehow become corrupted or lost.

The files for any GPO are located here by default:

\\dc_server\sysvol\domain name\policies\{GUID of GPO}\

Or it could simply be the permissions listed within Group Policy Management for this GPO don't grant you rights to Edit the GPO, as already suggested by Glennda.

Thanks,

Bruce.

Leeds, UK.