Group policy

  • Thread starter Thread starter shantanu
  • Start date Start date
S

shantanu

I am trying to see Domain Controller security policy but I
am getting an error message " Failed to open group policy.
You may not have appropriate right. Details The Specified
domain either does not exist or could not be Contacted."
Can any one help.
 
In
shantanu said:
I am trying to see Domain Controller security policy but I
am getting an error message " Failed to open group policy.
You may not have appropriate right. Details The Specified
domain either does not exist or could not be Contacted."
Can any one help.
Click to expand...

This is usually a DNS misconfiguration on the client side (DCs are DNS
clients too). When anything in a domain (DCs and clients) need anything else
in the domain, such as logging on, replication requests, GPO during logon,
administering GPOs, etc, etc, it queries DNS, specifically it's own internal
DNS that is holding the domain records. If using some other DNS server, that
DNS has no idea where your domain resources and services are located.
Otherwise numerouse errors will occur.

Guidelines for DNS:

1. ONLY use your internal DNS server. Do not list your ISP's or any other
external server (including your router's) in IP properties of ALL internal
machines (DCs and Clients).

2. To achieve efficient Internet resolution, use a forwarder. If the
Forwarding option is grayed out, delete the Root zone and refresh the
console and try again. This article shows how to configure forwarding and
deleting the Root zone:
http://support.microsoft.com/?id=300202

I hope that helps. If this does not, then the problem maybe deeper rooted,
such as single label name, Dynamic Updates not set to at least Yes, Primary
DNS Suffix is missing or incorrect, etc. If this didn't help, if you can
post an unedited ipconfig /all and your AD DNS domain name, that would help
give a start in diagnosing this.




--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Thanks Ace for your Solution. I am able to see and modify
my group policy now. But I have another problem if I am
trying to run Setup for Mcaffe Antivirus on my domain
controller it says That administrator has set policies to
prevent this Installation while I have'nt done something
like That. Can you please help me on this issue also.
Regards
 
In
shantanu said:
Thanks Ace for your Solution. I am able to see and modify
my group policy now. But I have another problem if I am
trying to run Setup for Mcaffe Antivirus on my domain
controller it says That administrator has set policies to
prevent this Installation while I have'nt done something
like That. Can you please help me on this issue also.
Regards
Click to expand...

I am happy to be of assistance.

As for the installation, are you logged on as an administrator account or an
Enterprise Admin account (depending on what the McAfee setup needs)?
You didn't make any changes in the GPO at all?

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Hi Ace
I am logged in as Administrator account and I have never
done any change in GPO at all.

Regards
Shantanu
 
In
shantanu said:
Hi Ace
I am logged in as Administrator account and I have never
done any change in GPO at all.

Regards
Shantanu
Click to expand...

I would therefore at this juncture, contact McAfee to see exactly what it's
looking for.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Back
Top