GPO

[Knutern]

Hi,

every time i selec one special GPO, the following error message is being displayd:

The Enterprise Domain Controllers group does not have read access to this GPO. The Etnerprise Domain Controller group must have read access on all GPOs in the domain in order for Group Policy Modeling to function properly.

The message also tells me to click on the help-button in order to let me know more about this problem. However, I find no futher information regarding this.

Also, I've checked the rights, and they are equal to those on other GPOs i have. I'm even able to modify/read the GPO in question.

Has any one experienced the like?


Cheers
Knutern

 

[markdmac]

Sounds like the permissions to the SYsvol folder are messed up. Add Network Service to the NTFS properties of that folder with Full Permissions.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[PScottC]

There is a VB script included with the GPMC that fixes this issue. Generate the error again and click on the help screen. You will see a section labeled "Upgrading Windows 2000 domains to Windows 2003 domians and interaction with Group Policy Modeling". Under that section, it references a script called "GrantPermissionOnAllGPOs.wsf". Follow the directions exactly and the error message you're seeing will go away.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers