Re: Policy issue



Hello CF,

Check out this one:
http://support.microsoft.com/kb/832214

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.



I have a single server on a domain acting as DC. This is a new
build/clean install of server 2003. I've created a new GPO on the
server using the Group Policy Management tool but when I edit a policy
setting and click OK I get the following error:

Security Templates.

Access is denied.

Failed to save.

\\my.domain\SysVol\my.domain\Policies\{22C261B7-06FD-4EF5-8E62-9CB1181
488B0}\Machine\Microsoft\Windows

NT\SecEdit\GptTmpl.inf. Make sure that you have the right permissions
to

this object.

I did have an issue with the junction points in SYSVOL not being
correctly established which was causing problems with FRS and assumed
that this was causing the above issue too. I've now fixed the SYSVOL
junction points with linkd and rebooted. FRS seems fine but the above
problem persists.

I'm logged on as Administrator and as far as I can see I have all of
the necessary permissions.

Any help greatly appreciated.



.



Relevant Pages

  • Re: GPOs cannot be saved because files being used by another proce
    ... Excessive Replication of FRS Data in Sysvol and DFS ... Check if FRS is currently running on the target server. ... Checking NtFrs related Registry Keys for possible problems...passed ...
    (microsoft.public.windows.server.active_directory)
  • Re: FRS does not replicate
    ... Think about rebuilding sysvol within your domain. ... I have inherited a site where I have frs issues. ... usual events for servers not replicating to each other. ... Since then the server was upgrade to 2003 and since it ran on its own ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to decommission a Windows 2008 DC via dcpromo
    ... server, so I manually created them, but apparently they didn't ... Can you open and compare sysvol and netlogon share on both DCs? ... The File Replication Service is having trouble enabling ... FRS can not correctly resolve the DNS name ...
    (microsoft.public.windows.server.active_directory)
  • Re: Policy issue
    ... I did have an issue with the junction points in SYSVOL not being ... correctly established which was causing problems with FRS and assumed ... I've now fixed the SYSVOL ... FRS seems fine but the above ...
    (microsoft.public.windows.server.security)
  • Re: DCDiag error
    ... sysvol is shared and accessible on both DC's.. ... Check if FRS is currently running on the target server. ... Ntfrs is registered with the End-Point-Mapper on target server!)": ...
    (microsoft.public.win2000.active_directory)