cannot delete group policy objects

[radical dissident]

i am trying to delete a couple of Group Policy Objects that became corrupted
during some earlier problems (now fixed) with ntfrs/global catalog failing
to start.

i now want to delete them. When I try, though, I get the error: "Failed to
delete the Group Policy Object. You may not have appropriate rights.
Details: The server is unwilling to process the request."

I've verified i have appropriate rights, & i've even taken ownership & given
my specific user (Administrator) full control rights on these.

So i've also tried ADSIedit, finding them by GUID under Policies
(ldap://jcgw1.corp.mydomain.net/CN=Policies,CN=System,DC=corp,DC=mydomain,DC
=net), & it too fails with the following msg: "The requested delete
operation could not be performed."

I can delete the directories for these undeleteable policies, but they still
show up as group policies in my forest (though not assigned to any OUs).
I've recreated the directories & copied over the files from newly-created
group policies & changed them, hoping that would allow deletion... no such
luck.


does anyone have any idea where to go from here? I am stumped.

thanks

 

[Ace Fekay [MVP]]

In

i am trying to delete a couple of Group Policy Objects that became
corrupted during some earlier problems (now fixed) with ntfrs/global
catalog failing to start.

i now want to delete them. When I try, though, I get the error:
"Failed to delete the Group Policy Object. You may not have
appropriate rights. Details: The server is unwilling to process the
request."

I've verified i have appropriate rights, & i've even taken ownership
& given my specific user (Administrator) full control rights on these.

So i've also tried ADSIedit, finding them by GUID under Policies
(ldap://jcgw1.corp.mydomain.net/CN=Policies,CN=System,DC=corp,DC=mydomain,DC
=net), & it too fails with the following msg: "The requested delete
operation could not be performed."

I can delete the directories for these undeleteable policies, but
they still show up as group policies in my forest (though not
assigned to any OUs). I've recreated the directories & copied over
the files from newly-created group policies & changed them, hoping
that would allow deletion... no such luck.


does anyone have any idea where to go from here? I am stumped.

thanks

Just a start in guessing here, it could point to a DNS issue. What errors
are you getting in the Event logs? Can you post the Event ID #'s please?

Just an FYI, make sure you don't use your ISP's DNS server in any internal
machine's IP properties. This can cause numerous issues, one of which that
you're experiencing. You should ONLY use your internal server. Configure a
forwarder for efficient Internet resolution.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory