Vista Enterprise GPO Issue

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When using GPMC on a Vista Enterprise box, I get an error when looking at GP
Results. The error message is:

An error has occurred while collecting data for Security Configuration
Engine (SCE) extension.

An unknown error occurred while data was gathered for this extension.
Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found

Anyone have any ideas
 
Hi,
An unknown error occurred while data was gathered for this extension.
Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found
Click to expand...

You are running the GPMC as a user, you need the permission "Create
symbolic Link" -> GPO: CompConf \ Security \ USer Rights Assignment

Mark
 
Actually, the account running GPMC is in the Administrators group on the
local PC. Shouldn't that work?

I will have to look at the local policy to check to see who has that
specific user right.
 
Hi,
Actually, the account running GPMC is in the Administrators group on the
local PC. Shouldn't that work?
Click to expand...

how do you start the GPMC? Using the UI, right mouse click
-> Start as an Admin?

Or did you create an own gpmc.msc, link it on the Desktop/Startmenu
and start it with:
runas.exe /user:domain\administrator "mmc.exe gpmc.msc"

The local Admin account is not allowed th access the AD.

Mark
 
I am logged into the PC with a domain account that is in a group nested in
the local administrators group. This account is the same account used to
create all GPOs from Windows XP.

I do a Start -> Run and type in GPMC.MSC This should be running GPMC as
this account right?

I have also created a normal shortcut to run GPMC.

I did check the user rights and the local administrators group has this right.

Logged in with this account, I ran a DOS prompt and typed in the command:
runas.exe /user:domain\administrator "mmc.exe gpmc.msc"

I got this error:

RUNAS ERROR: Unable to run - mmc.exe gpmc.msc
740: The requested operation requires elevation.
 
Hi,
runas.exe /user:domain\administrator "mmc.exe gpmc.msc"
I got this error:
RUNAS ERROR: Unable to run - mmc.exe gpmc.msc
Click to expand...

Is GPMC.msc the GPMC downloaded from Microsoft? That doesn´t work,
you should use the Vista integrated GroupPolicyManagement, if the
MS GPMC is installed, deinstall it.

run -> mmc -> open snapin -> GroupPolicyManagement (its a Vista own)
save mmc as e.g. %systemroot%\gpmc.msc

runas.exe /user:domain\administrator "mmc.exe %systemroot%\gpmc.msc"
^^^^^^ Your netbios domainname!

Mark
 
It is the version that came with Vista. I checked Programs and Features to
see if there was something installed. I didn't see GPMC listed.

I did use the NetBIOS name of the domain when doing the runas.

I had a co-worker try this from their machine, and he is getting the same
error.
 
Dave said:
It is the version that came with Vista. I checked Programs and Features to
see if there was something installed. I didn't see GPMC listed.
Click to expand...

Thats right, you have to integrate that snapin into an own MMC.
I created and saved it myself as gpmc.msc, but gpmc.msc is not
a MS Vista native command/snapin, it´s the name of my own MMC,
which I run as /user:mydom\Admin

Really strange. I just run the MMC without "runas", as a Domain User,
that has local Admin rights, but UAC enabled. The settings are perfectly
there. No error, only items like "edit" etc, are greyed out, because
in the domain, I´m just a user.

Hm, sorry, I can´t reproduce your error.

Mark
 
No problem. I appreciate you help. I will just need to play around some
more to see what is happening.
 
Back
Top