group policy error - cant edit

[Kevin Laro]

Hi,

I have a nasty problem with group policy. Although they work, I can
not edit group policies anymore (neither with dsa nor mmc and new snap
in). I posted this in another forum under general, however i guess its
the wrong location.

Config:
- 1 Windows2003 Server as DC, DNS server + DHCP server
- no further servers
- small network 20 users

It shows the following error:

"Group Policy Error:

Failed to open the Group Policy Object. You may not have appropriate
rights.
Detail: The parameter is incorrect."

I read about some issues in here and tried some solutions, but nothing
worked so far. Anyone an idea what the problem is??

The following was tested by me:

1. I tried if policy security settings are correct and in deed they
are. Domain admin has full control and i am logged in as such,
directly on the server. I can create a new policy but then again not
edit it?!

2. DCDiag: all tests passed

3. gpotool: all policies show status: OK


I am happy about any help,
Kevin

 

[Ace Fekay [MVP]]

In

Hi,

I have a nasty problem with group policy. Although they work, I can
not edit group policies anymore (neither with dsa nor mmc and new snap
in). I posted this in another forum under general, however i guess its
the wrong location.

Config:
- 1 Windows2003 Server as DC, DNS server + DHCP server
- no further servers
- small network 20 users

It shows the following error:

"Group Policy Error:

Failed to open the Group Policy Object. You may not have appropriate
rights.
Detail: The parameter is incorrect."

I read about some issues in here and tried some solutions, but nothing
worked so far. Anyone an idea what the problem is??

The following was tested by me:

1. I tried if policy security settings are correct and in deed they
are. Domain admin has full control and i am logged in as such,
directly on the server. I can create a new policy but then again not
edit it?!

2. DCDiag: all tests passed

3. gpotool: all policies show status: OK


I am happy about any help,
Kevin

Just to insure it is not a DNS misconfiguration on your DC, please post
additional configuration information to aid in diagnosis:

1. Unedited ipconfig /all
2. Name of the AD DNS domain name
3. Name (exact spelling) of the zone in DNS and if updates are allowed in
it's properties.
4. Any Event log errors (Event ID #s and Source please)

Thanks,
--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================