Help! Locked out of Domain Security Policy

  • Thread starter Thread starter Simon Lown
  • Start date Start date
S

Simon Lown

I made a stupid mistake and locked myself out of the
domain policies. The only way I could get back in (that I
know of) was a DSMODE restore. Done that, got access to
the "Domain Controller Security Policy" but when I try to
open the "Domain Security Policy" I get an error.
It show's a window titled "Group Policy Error" with the
warning message "Failed to Open Group Policy Object. You
may not have the appropriate rights." Then, in the
details box it says "The system cannot find the path
specified."
I don't know whether I've got registry entries missing,
files missing or an incorrect path. I can't find anything
on technet about this error. Can't even find where the
Domain Securiy Policy is located (Though I guess it's in
the Registry with template files on the disk somewhere)

I have three domain server at different sites and the
problem has replicated to all three.

Any thoughts or pointers would be extremely gratefully
accepted.

Regards,

Simon.
 
Hi Steve,
Don't know how you found that KB article, I searched for
hours and never saw it.
It was just the trick. Sorted. Now I just have to sort out
my original problem and i'm home free. ;-)
Many thanks for your help.
Simon.
 
Thanks again for the assist Steve,
My other problem is completely seperate. It's a domain
replication problem I've been having.
I have now tracked it down to the Firewall in ISA server.
I have been given a fix for VPN dropouts in ISA server by
microsoft which didn't work. This meant having to disable
ISA Firewall on 2 servers to get stable VPN links. It
seems that it blocks the FRS and DC replication process
when the firewalls aren't active. Looks like I'll have to
wait on MS to update that fix. Not very happy with them at
present. Wasted a lot of time trying to fix the AD
replication issues when it was their firewall all the time.

Sorry to go on. Been a long day.

Cheers again,

Simon.

-----Original Message-----
OK. Glad it was of help. What problem are you still having and what error message?
You might also want to post in the
Click to expand...
win2000.active_directory newsgroup. See KB links
 
Ouch! Good luck. --- Steve

Simon Lown said:
Thanks again for the assist Steve,
My other problem is completely seperate. It's a domain
replication problem I've been having.
I have now tracked it down to the Firewall in ISA server.
I have been given a fix for VPN dropouts in ISA server by
microsoft which didn't work. This meant having to disable
ISA Firewall on 2 servers to get stable VPN links. It
seems that it blocks the FRS and DC replication process
when the firewalls aren't active. Looks like I'll have to
wait on MS to update that fix. Not very happy with them at
present. Wasted a lot of time trying to fix the AD
replication issues when it was their firewall all the time.

Sorry to go on. Been a long day.

Cheers again,

Simon.


win2000.active_directory newsgroup. See KB links
Click to expand...
 
Back
Top