cannot access Domain Security Policy

  • Thread starter Thread starter Tim
  • Start date Start date
T

Tim

Greetings!

I have a problem accessing the domain security policy on
my domain. When I try to use the domain security policy
snap-in under administrative tools, I get an error
saying "access denied, you do not have permission to
perform this operation". I am logging on as
administrator. Any Ideas??
 
-----Original Message-----
This snap in is looking for the gpttmpl.inf file in
\\domain.com\sysvol\domain.com\{31B...} \Machine\Microsoft\WindowsNT\Secedit\

Check to see if you have FC of that file.
Click to expand...


Yes I do...

Tim
 
Then walk the tree in the run line

\\domain.com\sysvol
\\domain.com\sysvol\domain.com
\\domain.com\sysvol\domain.com\Policies
....
\\domain.com\sysvol\domain.com\Policies\{31B...\Machine\Microsoft\WindowsNT\
Secedit\
until you get a hangup.

Also check out the sharing permissions on the SYSVOL share.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.
 
Are you able to open the Default domain policy and get to Computer
config\windows settings\security settings?
This is the same thing as the Domain security policy and whether this works
or not help with troubleshooting.

Does the same problem occur on the domain controller security policy?
 
No it is not.

Tim
-----Original Message-----
Also, is the gpttmpl.inf file specified as read-only?

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.


Are you able to open the Default domain policy and get to Computer
config\windows settings\security settings?
This is the same thing as the Domain security policy
Click to expand...
and whether this
works
or not help with troubleshooting.

Does the same problem occur on the domain controller security policy?



--
James Brandt [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights

Tim said:
I can get all the way to the end without any problem or
hangup.

Tim

-----Original Message-----
Then walk the tree in the run line

\\domain.com\sysvol
\\domain.com\sysvol\domain.com
\\domain.com\sysvol\domain.com\Policies
....
\\domain.com\sysvol\domain.com\Policies\{31B...\Machine\Mi
crosoft\WindowsNT\
Secedit\
until you get a hangup.

Also check out the sharing permissions on the SYSVOL
share.

--Shawn
This posting is provided "AS IS" with no warranties and
confers no rights.




-----Original Message-----
This snap in is looking for the gpttmpl.inf file in
\\domain.com\sysvol\domain.com\{31B...}
\Machine\Microsoft\WindowsNT\Secedit\

Check to see if you have FC of that file.


Yes I do...

Tim



.
Click to expand...
Click to expand...


.
Click to expand...
 
Go into dsa.msc, right click on the domain, go to properties and click on
the group policy tab, and then highlight Default Domain Policy and then
click on edit. Send me the error that you get from there.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.



Tim said:
How do I open the Default Domain Policy?

I can open the Local and Domain Controller Security policy
without any problem.

Tim
-----Original Message-----
Are you able to open the Default domain policy and get to Computer
config\windows settings\security settings?
This is the same thing as the Domain security policy and whether this works
or not help with troubleshooting.

Does the same problem occur on the domain controller security policy?



--
James Brandt [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights

Tim said:
I can get all the way to the end without any problem or
hangup.

Tim

-----Original Message-----
Then walk the tree in the run line

\\domain.com\sysvol
\\domain.com\sysvol\domain.com
\\domain.com\sysvol\domain.com\Policies
....
\\domain.com\sysvol\domain.com\Policies\{31B...\Machine\Mi
crosoft\WindowsNT\
Secedit\
until you get a hangup.

Also check out the sharing permissions on the SYSVOL
share.

--Shawn
This posting is provided "AS IS" with no warranties and
confers no rights.




-----Original Message-----
This snap in is looking for the gpttmpl.inf file in
\\domain.com\sysvol\domain.com\{31B...}
\Machine\Microsoft\WindowsNT\Secedit\

Check to see if you have FC of that file.


Yes I do...

Tim



.
Click to expand...


.
Click to expand...
Click to expand...
 
Back
Top