[gptalk] Re: Group Policy Error
- From: "Warner, Scott" <swarner@xxxxxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Fri, 7 Mar 2008 08:07:04 -0700
Darren,
Thanks! I will try that. Do I need to do this on all of the DC's or
just the primary DC that the GP console resides on?
Scott
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, March 06, 2008 4:23 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy Error
OK. Then the next step is to look at the actual files in the SYSVOL part
of the GPO. Specifically, under
\\<domain>\sysvol\<domain>\Policies\<GUID
<file:///\\%3cdomain%3e\sysvol\%3cdomain%3e\Policies\%3cGUID> of
GPO>\User\Documents & Settings
Check the permissions on that Folder and the files in that folder
(should be at least one called fdeploy.ini). Make sure that the groups
below have write perms on that folder and files and that there aren't
any Deny ACEs.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Warner, Scott
Sent: Thursday, March 06, 2008 2:03 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy Error
Yes - Domain Admins, Enterprise Admins and Group Policy Creator Owners
all have the correct permissions.
Regards,
Scott P. Warner
IT Administrator
HMX Tailored
101 N. Wacker Drive
Chicago, IL 60606
312-357-5683
swarner@xxxxxxxxxxxxxx
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, March 06, 2008 3:58 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy Error
Scott-
It sounds like someone modified the default permissions on that GPO.
Have you gone into GPMC and looked at the Delegation tab on that GPO to
see who has edit perms?
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Warner, Scott
Sent: Thursday, March 06, 2008 1:53 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Group Policy Error
I just started a new gig and my predecessor had enabled folder
re-direction through the Default Domain Policy. We are currently having
issues with the re-direction and I was asked to axe it. The problem is
when I log in to the DC and open the Group Policy Management console and
try to edit the Folder Redirection Policy, I get the following error
message:
Error - Unable to save the redirection information to the configuration
file. The following error occurred: Access is denied.
My account is in Domain Admins and Enterprise Admins which are both in
Group Policy Creater Owners group in AD. Does anyone know what's going
on here and how I can fix this?
Regards,
Scott P. Warner
IT Administrator
swarner@xxxxxxxxxxxxxx
CONFIDENTIALITY NOTICE: Unless expressly stated otherwise, this message
is confidential and may be privileged. It is intended for the
addressee(s) only. Access to this E-mail by anyone else is unauthorized.
If you are not an addressee, any disclosure or copying of the contents
of this E-mail or any action taken (or not taken) in reliance on it is
unauthorized and may be unlawful. Unless otherwise indicated, it
contains information that is confidential, privileged or exempt from
disclosure under applicable law. If you have received it in error,
please notify the sender of the error and delete the message.
CONFIDENTIALITY NOTICE: Unless expressly stated otherwise, this message
is confidential and may be privileged. It is intended for the
addressee(s) only. Access to this E-mail by anyone else is unauthorized.
If you are not an addressee, any disclosure or copying of the contents
of this E-mail or any action taken (or not taken) in reliance on it is
unauthorized and may be unlawful. Unless otherwise indicated, it
contains information that is confidential, privileged or exempt from
disclosure under applicable law. If you have received it in error,
please notify the sender of the error and delete the message.
CONFIDENTIALITY NOTICE: Unless expressly stated otherwise, this message is
confidential and may be privileged. It is intended for the addressee(s) only.
Access to this E-mail by anyone else is unauthorized. If you are not an
addressee, any disclosure or copying of the contents of this E-mail or any
action taken (or not taken) in reliance on it is unauthorized and may be
unlawful. Unless otherwise indicated, it contains information that is
confidential, privileged or exempt from disclosure under applicable law. If you
have received it in error, please notify the sender of the error and delete the
message.
Other related posts:
