Hi Ther

I've had a server crash about a week back and since my restoration efforts I have not been able to access the default Domain Policy. I keep on getting a "Failed to open Group Policy Object: You may not have suffiecient rights" error. Under details it specifies a Unknown error. Upon examination of the event logs I came upon this error message

Source : ScglNtf
EventID : 100
Details: Default group policy object cannot be created. Error 80004005 to open GPO Domain EFS Recovery Policy in domai

Running gpotool I recieve an no errors message that I presume means that the policy is at least not corrupt. I've tried to remove the link to the default domain policy from the domain (through active directory users and computers), naturally this does not work

Running gpresult I can see that the Local Policy is used to set the EFS policy and registry policy

I'm running a domain with a single Win 2000 server and as such can not copy any other DC policy into my domain. I've tried to rectify the problem thorugh KBA 267553 and KBA 22643, both without success.

The problem I'm experiencing is that I can not install any programs on the server as a policy setting prevents this. Apparently. I need to get the server up and running as quickly as possible and for this I need to install Exchange and Sharded Fax again.

Is there any help, or hope out there? I'm really at my wits end and the only alternative seems to be to redo the server and the AD

One more question. A system state restore will most probably incorperate this GPO and the problem I'm experiencing at this stage

Any help is greatly apprecaited

Thanks

Christ

Just saw this yesterday:

http://www.microsoft.com/downloads/d...DisplayLang=en

New tool for 2000 that will re-create your default policy object. (It's
essentially dcgpofix, but for Windows 2000 instead of Windows 2003.)

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"ChristoB" <(E-Mail Removed)> wrote in message
news:30201732-B8BA-49E7-9EFD-(E-Mail Removed)...
> Hi There
>
> I've had a server crash about a week back and since my restoration efforts
> I have not been able to access the default Domain Policy. I keep on
> getting a "Failed to open Group Policy Object: You may not have
> suffiecient rights" error. Under details it specifies a Unknown error.
> Upon examination of the event logs I came upon this error message:
>
> Source : ScglNtfy
> EventID : 1002
> Details: Default group policy object cannot be created. Error 80004005 to
> open GPO Domain EFS Recovery Policy in domain
>
> Running gpotool I recieve an no errors message that I presume means that
> the policy is at least not corrupt. I've tried to remove the link to the
> default domain policy from the domain (through active directory users and
> computers), naturally this does not work.
>
> Running gpresult I can see that the Local Policy is used to set the EFS
> policy and registry policy.
>
> I'm running a domain with a single Win 2000 server and as such can not
> copy any other DC policy into my domain. I've tried to rectify the problem
> thorugh KBA 267553 and KBA 22643, both without success.
>
> The problem I'm experiencing is that I can not install any programs on the
> server as a policy setting prevents this. Apparently. I need to get the
> server up and running as quickly as possible and for this I need to
> install Exchange and Sharded Fax again.
>
> Is there any help, or hope out there? I'm really at my wits end and the
> only alternative seems to be to redo the server and the AD.
>
> One more question. A system state restore will most probably incorperate
> this GPO and the problem I'm experiencing at this stage?
>
> Any help is greatly apprecaited.
>
> Thanks
>
> Christ

Big Kisses! Thanks a million. You just saved at least 2 days of work.