Vista Enterprise GPO Issue

[Guest]

When using GPMC on a Vista Enterprise box, I get an error when looking at GP
Results. The error message is:

An error has occurred while collecting data for Security Configuration
Engine (SCE) extension.

An unknown error occurred while data was gathered for this extension.
Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found

Anyone have any ideas

 

[Dave]

I am getting the same error.

 

[Mark Heitbrink [MVP]]

Hi,

An unknown error occurred while data was gathered for this extension.
Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found

You are running the GPMC as a user, you need the permission "Create
symbolic Link" -> GPO: CompConf \ Security \ USer Rights Assignment

Mark

 

[Dave]

Actually, the account running GPMC is in the Administrators group on the
local PC. Shouldn't that work?

I will have to look at the local policy to check to see who has that
specific user right.

 

[Mark Heitbrink [MVP]]

Hi,

Actually, the account running GPMC is in the Administrators group on the
local PC. Shouldn't that work?

how do you start the GPMC? Using the UI, right mouse click
-> Start as an Admin?

Or did you create an own gpmc.msc, link it on the Desktop/Startmenu
and start it with:
runas.exe /user:domain\administrator "mmc.exe gpmc.msc"

The local Admin account is not allowed th access the AD.

Mark

 

[Guest]

I am logged into the PC with a domain account that is in a group nested in
the local administrators group. This account is the same account used to
create all GPOs from Windows XP.

I do a Start -> Run and type in GPMC.MSC This should be running GPMC as
this account right?

I have also created a normal shortcut to run GPMC.

I did check the user rights and the local administrators group has this right.

Logged in with this account, I ran a DOS prompt and typed in the command:
runas.exe /user:domain\administrator "mmc.exe gpmc.msc"

I got this error:

RUNAS ERROR: Unable to run - mmc.exe gpmc.msc
740: The requested operation requires elevation.

 

[Mark Heitbrink [MVP]]

Hi,

runas.exe /user:domain\administrator "mmc.exe gpmc.msc"
I got this error:
RUNAS ERROR: Unable to run - mmc.exe gpmc.msc

Is GPMC.msc the GPMC downloaded from Microsoft? That doesn´t work,
you should use the Vista integrated GroupPolicyManagement, if the
MS GPMC is installed, deinstall it.

run -> mmc -> open snapin -> GroupPolicyManagement (its a Vista own)
save mmc as e.g. %systemroot%\gpmc.msc

runas.exe /user:domain\administrator "mmc.exe %systemroot%\gpmc.msc"
^^^^^^ Your netbios domainname!

Mark

 

[Guest]

It is the version that came with Vista. I checked Programs and Features to
see if there was something installed. I didn't see GPMC listed.

I did use the NetBIOS name of the domain when doing the runas.

I had a co-worker try this from their machine, and he is getting the same
error.

 

[Mark Heitbrink [MVP]]

It is the version that came with Vista. I checked Programs and Features to
see if there was something installed. I didn't see GPMC listed.

Thats right, you have to integrate that snapin into an own MMC.
I created and saved it myself as gpmc.msc, but gpmc.msc is not
a MS Vista native command/snapin, it´s the name of my own MMC,
which I run as /user:mydom\Admin

Really strange. I just run the MMC without "runas", as a Domain User,
that has local Admin rights, but UAC enabled. The settings are perfectly
there. No error, only items like "edit" etc, are greyed out, because
in the domain, I´m just a user.

Hm, sorry, I can´t reproduce your error.

Mark

 

[Dave]

No problem. I appreciate you help. I will just need to play around some
more to see what is happening.