[gptalk] GPO cannot be saved

  • From: "Allen Lee" <dreamtradehk@xxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 18 Oct 2006 23:24:39 +0800

(sorry! I used an unregistered email account.  This is a resend using the
email registered with gptalk.)


Hi.  I am new here and this is my first post.  I am facing a weird problem.
Hope you can help me to solve it.


When I make a new GPO and finish editing, I am not able to save the changes.
For example, after I change a policy related to registry (user or machine),
it said the file cannot be found.  I check the repecting folder under the
{GUID} folder of the GPO, no registry.pol can be found.  The editor would
not create the file.  If I make a change regarding security setting, it said
GptTmpl.inf cannot be saved.  When I browse to the repecting folder, it is
strange that the inf file actually been created.


My system is a Windows 2000 Server with all Windows Updates.  It is the lone
server on the network.  I have followed this
http://support.microsoft.com/default.aspx?kbid=290647 to reset the
permission.  I cannot follow step 7 because GptTmpl.inf cannot be saved.  I
have also attached the log files of FileMon Utility.  The Dafault Domain
Policy.LOG recorded the process of attempting to save the change of "Bypass
traverse checking" in Default Domain Policy.  Loopback Policies.LOG recorded
the process of enable loopback policies in a newly added GPO.  Here are the
security setting of {GUID: 31B2F340-016D-11D2945F-00C04FB984F9} (Default
Domain Policy) under ADSI Edit:

Authenticated Users - Read; Apply Group Policies


Domain Admins - Read; Write; Build All Child Object; Delete All Child Object

Enterprise Admins -Read; Write; Build All Child Object; Delete All Child

SYSTEM - Read; Write; Build All Child Object; Delete All Child Object


I am using traditional chinese version windows.  I just traslated the naming
of the permission right to English therefore the wording may not be the


Could you please help me to solve this problem?  Thank you very much.


Best regards,


Allen Lee





Other related posts:

  • » [gptalk] GPO cannot be saved