Group policy error - need help (details)

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When I'm trying to open the Group Policy object i
Group Policy Editor, I receive the following error message

Failed to open the Group Policy Object. You may no
have appropriate rights
Details
The system cannot find the path specified

I've already read the information o

http://support.microsoft.com/default.aspx?scid=kb;EN-US;25326
but I have no backup

my w2k server is a stand alone domain controller which I use t
manage accounts and file sharing on a highschoo
laboratory; I had made a backup, but the file i
corrupted(probably a hard drive failure on th
computer where I was storing that backup); so now
don't seem to have too many options, because I can'
use the backup and I don't have another domai
controller from which to restore the group polic
objects
Is there any way to maintain the current use
accounts and configuration and re-create the folde
structures within the Sysvol container
Thank yo
 
Hi,

Just because you can't open a GPO doesn't mean your Users
etc are corrupt or missing. The error you get indicates
that the path to your GPO is not valid. Find the GUID of
the GPO that you are trying to edit by going into Users
and Computers, properties of the OU, click the Group
Policy TAB and then select the GPO, instead of clicking
Edit click Properties and then find the GUID (Unique name)
which is a Hex 'number'.

Next verify that this GPO is accessible by going (on your
DC) Start, Run,
\\<domainname>\SYSVOL\<domainname>\Policies\<GUID>

where GUID is the GPO GUID you found above. If this is
missing you need to restore this folder from backup tape.
A simple copy should work. If you have no backup then you
have the option of deleting this GPO using the GUI and
simply creating a new one and readding the GPO settings.
HOWEVER if the GPO is the Default domain or Default Domain
Controller GPO (GUID starting with 31B2F... or 6AC17...)
you should not delete this. If this is the case you can
build a brand new DC (on a seperate network) and copy the
GPO folder from this new temp DC.

Hope this helps.
Pete
 
Back
Top