[gptalk] Re: Can't use Group Policy Results Wizard

Hi,
This article, http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10310, details changes made to the default DCOM permissions in Windows Server 2003 SP1. Also, check the permissions on the OU and ensure you have the following permissions: "Generate Resultant Set of Policy(Planning)" and "Generate Resultant Set of Policy(Logging)" set to allow. 
Thanks,
Jason


Darren Mar-Elia wrote, on 3/21/2007 8:42 AM:

In order to do GPResults, you need the ability to talk DCOM and you need
access to WMI. If the error is specifically "Access Denied" that means that
something on the box is preventing you from properly authenticating to it.
As a starting point, can you map a drive on that box using your credentials?


-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Washington, Booker
Sent: Wednesday, March 21, 2007 7:27 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Can't use Group Policy Results Wizard
What should I look for, if when I try to run the Group Policy Results 
wizard on a computer(And I am logged on as a OU admin for the OU's
wherein these computers lay), I get an Access is denied error.

One of my techs, may have made some local GPO lockdowns and NTFS
permission settings to contribute to this.  I am just trying to figure
out which area to start

i.e, what are some typical settings that would cause an Access is denied
error


***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************




***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: