Announcement

Collapse
No announcement yet.

Group Policy Error:

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy Error:

    Hi Friends,

    I am very new to this forum but well experience to this field.

    This is my question:
    I have one main domain controller(ABC.mumbai.com) & one additional domain controller(XYZ.mumbai.com)
    FSMO role status: All are on main domain controller (ABC.mumbai.com)
    DNS entries are perfect. Connectivity is OK.
    Now problem is:
    While opening Group Policy from any of DC. It is giving me error:
    "Failed to open Group Policy Object. You may not have appropriate rights."

    I have checked:
    Dcdiag & Netdiag on both DC - all are OK
    DNS is working nice.
    Rights have no issues.

    Please guide
    Attached Files

  • #2
    Re: Group Policy Error:

    Do you definately have permissions?
    Have you checked the eventlog to see if anything is reported?

    Michael
    Michael Armstrong
    www.m80arm.co.uk
    MCITP: EA, MCTS, MCSE 2003, MCSA 2003: Messaging, CCA, VCP 3.5, 4, 5, VCAP5-DCD, VCAP5-DCA, ITIL, MCP, PGP Certified Technician

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

    Comment


    • #3
      Re: Group Policy Error:

      When you say rights are OK, what have you checked?

      Did you check the content of the SYSVOL?
      VCP on vSphere (4), MCITP:EA/DBA, MCTS:Blahblah

      Comment


      • #4
        Re: Group Policy Error:

        m80armMichael )
        Yes, I am enterprise administrator.

        Comment


        • #5
          Re: Group Policy Error:

          Originally posted by gepeto View Post
          When you say rights are OK, what have you checked?

          Did you check the content of the SYSVOL?


          Sunad: Yes there is not sysvol folder in additional DC.
          & in main DC - under sysvol folder default domain policy & defaul DC policy.....only two.

          Comment


          • #6
            Re: Group Policy Error:

            Sunad: Yes there is not sysvol folder in additional DC.
            & in main DC - under sysvol folder default domain policy & defaul DC policy.....only two.

            Comment


            • #7
              Re: Group Policy Error:

              One more thing: in Additional DC
              under sysvol folder it showing folder "NTfrs_PreExisting__see_Eventlog"

              Comment


              • #8
                Re: Group Policy Error:

                Yes there is not sysvol folder in additional DC.
                & in main DC - under sysvol folder default domain policy & defaul DC policy.....only two.

                One more thing: in Additional DC
                under sysvol folder it showing folder "NTfrs_PreExisting__see_Eventlog"

                Comment


                • #9
                  Re: Group Policy Error:

                  yes anyone could come forward in help me in this issue....
                  i am an enterprise administrator with whole bunch of righs....& can give u informaton required to resolve this problem

                  Comment


                  • #10
                    Re: Group Policy Error:

                    I am thinking that this is related to an issue which I just resolved one of my domains. Although I did not ever try to open Group Policy during this error state, I imagine if I did I would have received your error message about failing to open the GPO.

                    I worked on this forum to resolve the issue, here is the thread:
                    http://forums.petri.com/showthread.php?t=20830

                    As a side note not mentioned in the thread, I had the same "NTfrs_PreExisting__see_Eventlog" folder in sysvol as well. This got created after flagging the "burflag" registry setting to do a non-authoritative restore. The only difference may be that I had an existing copy of the scripts and policies folder which was originally in the sysvol folder. If you don't have these anywhere on the server itself, do you have a backup of them?

                    Let me know if I can help any more, but I think you'll find the information you need on that forum link above.

                    **EDIT**
                    You may also find this link useful, I used it for reference although I didn't follow the whole guide. http://support.microsoft.com/kb/315457. And in reference to my comment above about having an existing copy of the scripts/policy folders, take a look inside the "NTfrs_PreExisting__see_Eventlog" folder. This folder gets created automatically by the NTFRS restore process, and will have a backup of the scripts/policy folders which Windows automatically created.

                    ~Kara
                    Last edited by karatecki; 10th April 2008, 15:03. Reason: Added more information I thought useful.
                    ~Kara
                    'What we do not make conscious emerges later as fate.' Carl Jung

                    Comment

                    Working...
                    X