Group Policy Console will not open

  • Thread starter Thread starter Al
  • Start date Start date
A

Al

After promoting my W2KAS server to a DC (with AD,DHCP,&
DNS) I try to open either of the two group policy consoles
and get the message:

"Failed to open the Group Policy Object. You may not
have appropriate rights."

I do, however, have rights to the
winnt\sysvol\sysvol\<domain name> directory and all the
sub-dirs. I've even "destroyed" these directories and
rebuilt them to no effect.

I'm *sure*!!!?! I configured DHCP and especially DNS
correctly and have checked all the MS Support docs I can
find on such configuration.

When I run gpresults on the DC it indicates that all the
security policies are being received but I'm not sure how
gpresults works so I'm skeptical.

The event log error(shown below)occurs when I attempt to
open the Group Security Policy console. The error message
does not mention the server name in the LDAP path but once
again my knowledge or the error messages and how they work
is not that deep.

Event Type: Error
Event Source: SclgNtfy
Event Category: None
Event ID: 1002
Date: 8/5/2003
Time: 12:19:25 PM
User: N/A
Computer: appserver
Description:
Default group policy object cannot be created. Error
800704cf to open GPO Domain EFS Recovery Policy in domain
LDAP://DC=domain,DC=com.

Any direction to go with this one? Thanks in advance for
any help.

Al
 
Rick Kingslan said:
Al,

I've seen this once before and it seems that on rare occasions the
EFS policy is not set up correctly on creation. Take a look at this
for more information and a possible fix. Let us know how it goes.
Click to expand...
Hi Al,
try this:
start regedit -
HKLM\system\currentcontrolset\services\lanmanserver\parameters
\requiresecuritysignature set it to 0.

Ralf
 
Back
Top