Can’t Create GPO This security ID may not be assigned as the owner of this object.

Home Forums Server Operating Systems Windows Server 2012 / 2012 R2 Can’t Create GPO This security ID may not be assigned as the owner of this object.

This topic contains 3 replies, has 4 voices, and was last updated by  trash77777 1 year, 6 months ago.

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts

  • bethk
    Member
    #167025

    Hi,

    I am unable to create a new GPO in my Domain 2012 R2 DC. I created many of the GPOs that are in the domain currently but recently I am getting:

    This security ID may not be assigned as the owner of this object.

    When trying to add a new policy. Tried the GUI and also from the powershell cmd new-gpo – hoping that perhaps I would get more diagnostic information from the powershell — but same message either way.

    From several sites I have read this error indicates the user doesn’t have the correct permissions for SOMETHING — but cannot figure out where it is missing.

    Tried resetting permissions to default via https://technet.microsoft.com/en-us/library/cc816750(v=ws.10).aspx

    C:Windowssystem32>icacls c:WindowsSYSVOL
    c:WindowsSYSVOL NT AUTHORITYAuthenticated Users: (RX)
    NT AUTHORITYAuthenticated Users: (OI)(CI)(IO)(GR,GE)
    BUILTINServer Operators: (RX)
    BUILTINServer Operators: (OI)(CI)(IO)(GR,GE)
    BUILTINAdministrators: (F)
    BUILTINAdministrators: (OI)(CI)(IO)(F)
    NT AUTHORITYSYSTEM: (F)
    NT AUTHORITYSYSTEM: (OI)(CI)(IO)(F)
    BUILTINAdministrators: (F)
    CREATOR OWNER: (OI)(CI)(IO)(F)

    Anyone have know what I am doing wrong? Where can I look?

    Really appreciate insights.

    Beth


    Ossian
    Moderator
    #191668

    What account are you using to create the GPO?
    Have you tried a different domain admin account?


    trash77777
    Member
    #391794

    Hi,

    I am using a Domain administrator account and I have tried another domain administrator account. Neither work.

    Thank you.
    ****EDIT****
    Thank you again. This is resolved. I disabled a compliance GPO required by our company and the issue has resolved. I do not know which setting was causing the issue yet but I will at some point have to go through each setting and determine which caused this problem. Thank you again for your response…I will focus on any settings involving user rights.

    Beth


    JeremyW
    Moderator
    #271487

    Thanks Beth. When you find the issue could you share it here as it may help others too?

    Thanks!

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.