Can’t Create GPO This security ID may not be assigned as the owner of this object.

Home Forums Server Operating Systems Windows Server 2012 / 2012 R2 Can’t Create GPO This security ID may not be assigned as the owner of this object.

This topic contains 3 replies, has 4 voices, and was last updated by Avatar trash77777 2 years ago.

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • Avatar
    bethk
    Member
    #167025

    Hi,

    I am unable to create a new GPO in my Domain 2012 R2 DC. I created many of the GPOs that are in the domain currently but recently I am getting:

    This security ID may not be assigned as the owner of this object.

    When trying to add a new policy. Tried the GUI and also from the powershell cmd new-gpo – hoping that perhaps I would get more diagnostic information from the powershell — but same message either way.

    From several sites I have read this error indicates the user doesn’t have the correct permissions for SOMETHING — but cannot figure out where it is missing.

    Tried resetting permissions to default via https://technet.microsoft.com/en-us/library/cc816750(v=ws.10).aspx

    C:Windowssystem32>icacls c:WindowsSYSVOL
    c:WindowsSYSVOL NT AUTHORITYAuthenticated Users: (RX)
    NT AUTHORITYAuthenticated Users: (OI)(CI)(IO)(GR,GE)
    BUILTINServer Operators: (RX)
    BUILTINServer Operators: (OI)(CI)(IO)(GR,GE)
    BUILTINAdministrators: (F)
    BUILTINAdministrators: (OI)(CI)(IO)(F)
    NT AUTHORITYSYSTEM: (F)
    NT AUTHORITYSYSTEM: (OI)(CI)(IO)(F)
    BUILTINAdministrators: (F)
    CREATOR OWNER: (OI)(CI)(IO)(F)

    Anyone have know what I am doing wrong? Where can I look?

    Really appreciate insights.

    Beth

    Avatar
    Ossian
    Moderator
    #191668

    What account are you using to create the GPO?
    Have you tried a different domain admin account?

    Avatar
    trash77777
    Member
    #391794

    Hi,

    I am using a Domain administrator account and I have tried another domain administrator account. Neither work.

    Thank you.
    ****EDIT****
    Thank you again. This is resolved. I disabled a compliance GPO required by our company and the issue has resolved. I do not know which setting was causing the issue yet but I will at some point have to go through each setting and determine which caused this problem. Thank you again for your response…I will focus on any settings involving user rights.

    Beth

    JeremyW
    JeremyW
    Moderator
    #271487

    Thanks Beth. When you find the issue could you share it here as it may help others too?

    Thanks!

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.