Hi Darren - I have given Authenticated Users read access to this file and a gpoupdate /force applies without error. should this file have that security on it as my default domain policy doesn't On Wed, August 30, 2006 5:10 pm, Darren Mar-Elia said: > Robert- > You might want to check the following: > > 1) that the registry.pol file is actually there > 2) that the permissions that appear on it look ok (that System and > Authenticated Users > have at least Read access to it) > > If the above are true, then you might want to download my polviewer utility on my site > and use it to try and open that registry.pol file. If the file format is corrupted, then > it will report that and you know that the file is no good and probably needs > to be > rebuilt. > > Darren > > -----Original message----- > From: "Robert Mariani" rmariani@xxxxxxxxxxx > Date: Tue, 29 Aug 2006 23:05:12 -0400 > To: gptalk@xxxxxxxxxxxxx > Subject: [gptalk] Default DC Policy > >> >> >> >> Hi All, >> ?? I had the unfortunate experience of having to do an >> authoriative domain restore this morning. >> >> Everything went ok - except bloody >> Veritas Backup Exec playing up a bit? >> >> I am seeing only one error showing >> when my DC's apply the default domain contollers policy >> >> it is an error 1043 >> followed by 1096 >> >> >> Windows cannot access the registry policy file, >> <domain>\sysvol\<domain>\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\Machine\registry.pol. >> (Access is denied. ). >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> anyone got any ideas in how >> to correct?? >> >> Thanks >> Robert >> >> > > *********************** > You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with > 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. > Archives for the list are available at //www.freelists.org/archives/gptalk/ > ************************ >