The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: RE: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem?

Prev Next

You are not authorized to post a reply.

Author

Messages

Darren

Posts:103

03/25/2009 11:06 AM
Carol- Can you verify that Domain Admins truly has the proper rights on GPOs? Can you view the security on a particular GPO and look at what it says under the Delegation tab in GPMC? Darren From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Carol M. Chisholm Sent: Wednesday, March 25, 2009 7:48 AM To: xxxxxxxxxxxxxxxx Subject: RE: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem? I have taken my workstation out of the domain, deleted its account, waited 15 minutes and re-joined it. No errors during the process. I still have all the "edit" options greyed out. (Edit, New, Create a GPO, Link a GPO, Block Inheritance..) From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Carol M. Chisholm Sent: 25 March 2009 15:09 To: xxxxxxxxxxxxxxxx Subject: RE: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem? I only joined the domain last week, I can try re-joining it. Another of the RSAT tools is DNS editor; I can view the DNS settings on the DC but not edit them. It looks like permissions thing. The machine is getting updated by the group policy, gpupdate generated no errors. My domain logon seems valid, but I will take myself out of the domain and back in again. From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: 25 March 2009 15:05 To: xxxxxxxxxxxxxxxx Subject: RE: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem? Carol- Based on your description, are you sure that your machine account is still good with the domain? Does other domain-based authentication work? Also, not sure what you mean by you can't edit your DNS? Do you mean your DNS server or the DNS config. on your client? Darren From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Carol M. Chisholm Sent: Tuesday, March 24, 2009 11:22 PM To: xxxxxxxxxxxxxxxx Subject: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem? Windows 2003 R2 DC, in a domain that once was managed by SBS. I'm working remotely from a Vista SP1 workstation in the domain, logged in as a domain admin. I am off site working through a firewall-firewall VPN. I have my RSAT tools (Group Policy Management console and so on) and I can run them as administrator, but even then I cannot edit anything. I cannot edit my DNS either. If I log onto the server with the same account I can change all these things. I have checked my user (elevated command prompt and whoami). I have write access to the admin shares on the DC. Carol Chisholm

You are not authorized to post a reply.

Forums >GPTalk >GPTalk Mailing List > RE: [gptalk] OT: can't edit GPO or edit in other RSAT tools - permissions problem?

ActiveForums 3.7

Ads

The GPTalk Mailing List

List Posts

Members

Ads