Group Policy Error

[JBailey]

Hello,

Whenever I try to edit a GPO from my workstation using the Group Policy
Management Tool I receive the following error:

Failed to open the Group Policy Object. You may no have approporate rights.
Details:
The network path was not found

The tool is able to open the domain, see all the GPOs, but not edit them.

I have checked DNS, Sysvol permission, and they both look fine.

I AM able to edit the GPOs from a DC.

Any ideas what to check?

Thanks,
JBailey

 

[Buz [MSFT]]

I have seen an error of this type when Internet Connection
Firewall was enabled. Can you disable it on the client and server (if
Windows 2003) to test?


1. Click "Start", and then click "Control Panel".

2. Double-click "Network Connections".

3. Right-click the connection you want to turn off Internet Connection
Firewall for, and then click "Properties".

4. On the "Advance" tab, click to clear the "Protect my computer and
network by limiting or preventing access to this computer from the
Internet" check box.

5. Click "OK".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[JBailey]

Was already unchecked.

Any other ideas?

I have seen an error of this type when Internet Connection
Firewall was enabled. Can you disable it on the client and server (if
Windows 2003) to test?


1. Click "Start", and then click "Control Panel".

2. Double-click "Network Connections".

3. Right-click the connection you want to turn off Internet Connection
Firewall for, and then click "Properties".

4. On the "Advance" tab, click to clear the "Protect my computer and
network by limiting or preventing access to this computer from the
Internet" check box.

5. Click "OK".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Buz [MSFT]]

Here are some ideas, it seems that you may have a mismatched version of the
Adminpak perhaps? Verify you have the latest and the correct version
installed for what you are you are trying to administer.

329357 Windows Server 2003 Adminpak.msi Does Not Run on a Windows XP-Based
http://support.microsoft.com/?id=329357

314978 HOW TO: Use Adminpak.msi to Install a Specific Server Administration
http://support.microsoft.com/?id=314978

269483 Windows 2000 Administration Tools Package (Adminpak.msi) Updates
http://support.microsoft.com/?id=269483

304718 Administering Windows Server-Based Computers Using Windows XP
http://support.microsoft.com/?id=304718

324745 HOW TO: Install the Windows Server 2003 Administration Tools Pack on
http://support.microsoft.com/?id=324745


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[JBailey]

I am pretty sure I am running the correct Adminpak. I checked with another
admin here, and he seems to be having the same problem. When I attempted to
go to \\domainname\sysvol I get the following error:

\\domainname.com\sysvol is not accessible. You might not have permission to
use this network resource.
The network path was not found

I have checked the permissions on the sysvol share and they are still set to
the defaults. And the account I am trying to do all of this with is a member
of the domain admins groups

JBailey

 

[Buz [MSFT]]

If you are saying you can't go to \\domainname\sysvol or
domainname.com\sysvol then you either have DFS service or DNS configuration
issue.

Can any clients or the domain controller itself go to \\domainname\sysvol?

237675 Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?id=237675

Also is your domain controller multi-homed? If so are there 2 host records
in DNS with different IP Addresses for the same server?

258296 Cannot Access Group Policy Objects--Event ID 1000 and Event ID 1001
http://support.microsoft.com/?id=258296

Make sure the DFS Server service is enabled on the server as well.




Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[JBailey]

DFS Service was stopped on our DCs. Didnt realize this was necessary in
order to manipulate GPOs remotely. Any docs on this subject?

Thanks,
JBailey

 

[Buz [MSFT]]

812487 Overview of DFS in Windows 2000
http://support.microsoft.com/?id=812487

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.