Grpup policy error msg

[Vikrant]

Hi,

I have a domain controller (W2K) with active diretory and SP4 installed on
it. I had configured certain domain controller group policies.

Recenly I installed microsoft exchange server 2000 with service pack 3 on
the same domain controller. After doing so I am not able to get access to
the domain controller security policies and not even to the domain security
policies.

While I try to open it, it says " Failed to open the group policy object.
You may not have appropriate rights." though I login as administrator
privilage.
Need help on this

Regards and Thanks
Vikrant

 

[Paul Bergson]

Check to see if the dfs service is up and running on the DC.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Cary Shultz [A.D. MVP]]

Vikrant,

A side note: Typically it is not desirable to install Exchange ( or much of
anything else ) on a Domain Controller. Terminal Services and Exchange and
IIS are better served on a Member Server.......

This may not help you with your current situation but might help down the
road....

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com

 

[Vikrant]

Yes dfs service is up and running

Check to see if the dfs service is up and running on the DC.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Jorge_de_Almeida_Pinto]

Hi,

I have a domain controller (W2K) with active diretory and SP4
installed on
it. I had configured certain domain controller group policies.

Recenly I installed microsoft exchange server 2000 with
service pack 3 on
the same domain controller. After doing so I am not able to
get access to
the domain controller security policies and not even to the
domain security
policies.

While I try to open it, it says " Failed to open the group
policy object.
You may not have appropriate rights." though I login as
administrator
privilage.
Need help on this

Regards and Thanks
Vikrant

When editing doman GPOs the default server that is targeted is the DC
that holds the PDC Emulator FSMO. Is that server available?. Is the
policy you want to edit available on the PDC?

You can check the health of you GPOs with the GPOTOOL tool from the
resource kit (w2k3)

Running without the quotes: "gpotool /checkacl /verbose" will check
all GPOs on ALL DCs in the domain. You might want to pipe the output
and read it with notepad (gpotool /checkacl /verbose >
GPOTOOL_OUTPUT.TXT)

Cheers,

 

[Guest]

I have the exact SAME problem... but Exchange 2000 SP3 is NOT installed on a
Domain Controller.

The Details of the error state "An invalid dn syntax has been specified" but
I cannot seem to find WHERE this is specified so I can correct it.

The "Target" fields of the Administrative Tools shortcuts for "Domain
Controller Security Policy" and "Domain Security Policy" are both greyed-out
displaying "Windows 2000 Administrative Tools" (or something to that effect)
so there is nothing in the Properties of these shortcuts that I can correct.

I have tried searching through the Registry and haven't been able to find
anything.

Until I can see what "dn syntax" IS being specifed, I'm not even sure what
part of it is "invalid"!

If anyone knows where these shortcuts store this information or has some
other suggestions, I would also appreciate it too!

- jerryl