bethkMemberMay 20, 2017 at 1:47 pm #167025
I am unable to create a new GPO in my Domain 2012 R2 DC. I created many of the GPOs that are in the domain currently but recently I am getting:
This security ID may not be assigned as the owner of this object.
When trying to add a new policy. Tried the GUI and also from the powershell cmd new-gpo – hoping that perhaps I would get more diagnostic information from the powershell — but same message either way.
From several sites I have read this error indicates the user doesn’t have the correct permissions for SOMETHING — but cannot figure out where it is missing.
Tried resetting permissions to default via https://technet.microsoft.com/en-us/library/cc816750(v=ws.10).aspx
c:WindowsSYSVOL NT AUTHORITYAuthenticated Users: (RX)
NT AUTHORITYAuthenticated Users: (OI)(CI)(IO)(GR,GE)
BUILTINServer Operators: (RX)
BUILTINServer Operators: (OI)(CI)(IO)(GR,GE)
NT AUTHORITYSYSTEM: (F)
NT AUTHORITYSYSTEM: (OI)(CI)(IO)(F)
CREATOR OWNER: (OI)(CI)(IO)(F)
Anyone have know what I am doing wrong? Where can I look?
Really appreciate insights.
OssianModeratorMay 21, 2017 at 12:30 am #191668
What account are you using to create the GPO?
Have you tried a different domain admin account?
trash77777MemberMay 22, 2017 at 4:47 am #391794
I am using a Domain administrator account and I have tried another domain administrator account. Neither work.
Thank you again. This is resolved. I disabled a compliance GPO required by our company and the issue has resolved. I do not know which setting was causing the issue yet but I will at some point have to go through each setting and determine which caused this problem. Thank you again for your response…I will focus on any settings involving user rights.
You must be logged in to reply to this topic.