failed to open GPO....on secondary DC

  • Thread starter Thread starter Andrei Bolboceanu
  • Start date Start date
A

Andrei Bolboceanu

Hi,
I have a strange problem with secondary DC in a Windows 2000 domain:
after installation everything works fine on both DC for several months - but
from several days ago on secondary DC I can't access neither domain security
policy or domain controller security policy - it says "Failed to open the
GPO. You main not have appropriate rights" - and for details "the system
cannot find the path specified".

Both DC runs Windows 2000 Server with SP3, the network works fine , I was
login with Administrator account on both DC, and the active directory
replication seems to work fine in active directory sites and services and in
event viewer it did not return a specific error related to GPO.
Any clue?

Thx, Andrew.
 
GPO's are normaly edited on a server that holds a PDC role, so check, that
your server with PDC role is ok. Next check, that you can access a DFS share
\\yourdomain.whatever\sysvol and that you can browse to the poilcies
objects.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
Thank you
- I still have some questions:
looking in \\domaincontroler\sysvol I find 2 recordings - and in each, there
is a file gptTmpl.inf - but those files are not the same size an contents -
here is the problem? (those are the files for each DC?).
My PDC is ok - it didn't return any error in active directory - and it is
possible to access GPO - but on the server with BDC role it isn't.
Any other sugestion, Andrew.
 
Back
Top