+ Post New Thread
Results 1 to 10 of 10
Windows Thread, GPMC "Access Denied" for Administrator in Technical; Trying to edit group policies on my PDC, (Win 2003 Ent) and whn I open up any GPO in the ...
  1. #1

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,658
    Thank Post
    858
    Thanked 646 Times in 429 Posts
    Rep Power
    498

    GPMC "Access Denied" for Administrator

    Trying to edit group policies on my PDC, (Win 2003 Ent) and whn I open up any GPO in the GPMC I get an Access Denied error

    Can access it fine on my BDC, using the Administrator account - just not the PDC!

    HELP!!!

  2. #2
    StewartKnight's Avatar
    Join Date
    Jun 2005
    Posts
    1,587
    Thank Post
    2
    Thanked 27 Times in 21 Posts
    Rep Power
    30

    Re: GPMC "Access Denied" for Administrator

    Perhaps you need to run dcpromo

  3. #3
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: GPMC "Access Denied" for Administrator

    Quote Originally Posted by StewartKnight
    Perhaps you need to run dcpromo
    No it should run from any PC with admin rights.

  4. #4

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,843
    Thank Post
    583
    Thanked 2,162 Times in 987 Posts
    Blog Entries
    23
    Rep Power
    627

    Re: GPMC "Access Denied" for Administrator

    I was going to suggest that the default domain policy has been changed (been there done that) and policies enforced.

  5. #5

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,658
    Thank Post
    858
    Thanked 646 Times in 429 Posts
    Rep Power
    498

    Re: GPMC "Access Denied" for Administrator

    Quote Originally Posted by Dos_Box
    I was going to suggest that the default domain policy has been changed (been there done that) and policies enforced.
    What settings would need to hav been changed - it had been editted but im sure it was working afte the changes had been made

  6. #6
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: GPMC "Access Denied" for Administrator

    A good rule of thumb as well is not to edit the default domain policy and instead put another one at its level and edit that. That way if you mess it up its not a complete tradgedy. There is a tool to reset it somewhere as well.

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: GPMC "Access Denied" for Administrator

    Also your DC could have broken. See if any services have failed. Netlogon is a favorite for this.

  8. #8

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,658
    Thank Post
    858
    Thanked 646 Times in 429 Posts
    Rep Power
    498

    Re: GPMC "Access Denied" for Administrator

    just tried again and when it throws up the insuficient rights error it also says about an "incorrect function"

  9. #9

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,621
    Thank Post
    49
    Thanked 451 Times in 334 Posts
    Rep Power
    137

    Re: GPMC "Access Denied" for Administrator

    Policies are stored in the sysvol which is replicated to each DC.
    If you can access them on one DC and not the other then replication must have failed!

    Check the system clocks on the Dc's make sure they are in sync.
    Check your DNS functions "critical" if you have DNS on more than one server ensure the are replicating correctly.
    If you run DNS on two DC's then ensure they use each other for DNS first, this enables a DC to have access to a working DNS before some of it's local services start up before the local DNS comes on-line.

    Watch out for Multi Homed DC's runing two NIC's in a DC is a disaster unless you have them configured correctly.

    Do as the other posts say never edit the default policy, create a second and link it to the root of the forest.

    Focus on the DNS and replication issues first if they exist this will be why you can't acces the policy.

    Use the backup tool in GPMC regularly to make copies of your policies.

  10. #10
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: GPMC "Access Denied" for Administrator

    I've managed to get out of this before with... safe mode - who'd have thought it - after slightly balls-ing up the GP one time - a time never to be repeated might i add, but i was learning GP and AD at the time lol

    This is going back about 1.5 years so i cant say for sure if that will work - but its another thing to try.

    Regards
    Nath

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 31
    Last Post: 30th June 2008, 10:03 AM
  2. Replies: 7
    Last Post: 19th June 2007, 08:34 AM
  3. Replies: 6
    Last Post: 28th September 2006, 07:06 PM
  4. Replies: 2
    Last Post: 13th June 2006, 09:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •