Announcement

Collapse
No announcement yet.

Default Domain GP edit greyed out

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Default Domain GP edit greyed out

    Hi,
    I have windows 2012 and want to edit the default domain policy but the edit is greyed out. The other policies I have created are ok.
    I am a member of the domain admins as well as others.
    Anyone any ideas?

    Thanks
    lesd0

  • #2
    Re: Default Domain GP edit greyed out

    Is the account you are using a member of a group that has permission to Edit the Policy?

    I've not seen how this is laid out in 2012 but in 2008 if you select the policy and then look at the Delegation tab you can see which security groups have read permission and Edit permission. You must be a member of a group with Edit permission.
    A recent poll suggests that 6 out of 7 dwarfs are not happy

    Comment


    • #3
      Re: Default Domain GP edit greyed out

      Try to open the Domain GPO as Administrators eventhough you are logon as Domain admins.

      Right click on "Group Policy Managment"->Run as administrator

      Comment


      • #4
        Re: Default Domain GP edit greyed out

        Hi Blood,

        The delegation tab is still there and I am a member of two of the groups with edit permissions.

        Lesd0

        Comment


        • #5
          Re: Default Domain GP edit greyed out

          Hi Humannetwork,

          I tried that and it didn't work but then I went in as administrator and that works, I've now got to investigate why.

          Thanks
          Lesd0

          Comment


          • #6
            Re: Default Domain GP edit greyed out

            Check out Additional Considerations in the topic below:

            http://technet.microsoft.com/en-us/l.../cc754740.aspx
            A recent poll suggests that 6 out of 7 dwarfs are not happy

            Comment


            • #7
              Re: Default Domain GP edit greyed out

              Your account doesn't have permission to edit the "Default Domain GPO". It is a delegation issue.

              Logon as domain admin (the one that you are able to edit the GPO)
              Launch GPO management console
              Click on "Defualt Domain Policy"
              On the right pane, click on delegation tab.
              Add your account in that tab and give yourself appropriate security permission.

              You should be good to go.

              Comment

              Working...
              X