| Author | Messages | |
tconnell
Posts:16
 | | 02/03/2009 9:33 AM |
| Hi All- I have a strange problem I can't fix. On one of my Domain Controllers whenever I go to edit a group policy object and click "Edit" from within AD, when the group policy object editor opens it has the wrong "focus" it is always pointing to the Local Computer Policy instead of the object I want to edit. If I manually choose Add/Remove snap-in I can open and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same thing. I also tried copying gpedit.msc from a working Domain Controller and it still does the same thing. Anyone have any ideas on how to fix it? I am afraid other Administrators (or myself) might accidently edit the wrong policy because of this. Thanks in advance,
Todd
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright (c) 2009 Levittown Public Schools - All rights reserved.
| | | |
| omar
Posts:97
| | 02/03/2009 11:42 AM |
| Hi Todd,
I would recommend that you download and install the Group Policy Management Console.
This will of course remove your ability to click on Edit- or even get a list of GPOs from within AD users and Computers-but it may just solve your issue and this is the tool you should be using anyway - and the bonus is that there are many more new functions.
Now if you are on a domain controller running Windows 2000- well- that product is end of life but GPMC works fine on windows 2003 and XP
hope that helps
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 06:28 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] wrong object focus
Hi All- I have a strange problem I can't fix. On one of my Domain Controllers whenever I go to edit a group policy object and click "Edit" from within AD, when the group policy object editor opens it has the wrong "focus" it is always pointing to the Local Computer Policy instead of the object I want to edit. If I manually choose Add/Remove snap-in I can open and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same thing. I also tried copying gpedit.msc from a working Domain Controller and it still does the same thing. Anyone have any ideas on how to fix it? I am afraid other Administrators (or myself) might accidently edit the wrong policy because of this. Thanks in advance,
Todd
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright © 2009 Levittown Public Schools - All rights reserved.
| | | |
| tconnell
Posts:16
| | 02/03/2009 11:45 AM |
| I actually tried that and it has the same problem when I go to "Edit" an actual GP object.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Tuesday, February 03, 2009 11:43 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] wrong object focus
Hi Todd,
I would recommend that you download and install the Group Policy Management Console.
This will of course remove your ability to click on Edit- or even get a list of GPOs from within AD users and Computers-but it may just solve your issue and this is the tool you should be using anyway - and the bonus is that there are many more new functions.
Now if you are on a domain controller running Windows 2000- well- that product is end of life but GPMC works fine on windows 2003 and XP
hope that helps
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 06:28 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] wrong object focus
Hi All- I have a strange problem I can't fix. On one of my Domain Controllers whenever I go to edit a group policy object and click "Edit" from within AD, when the group policy object editor opens it has the wrong "focus" it is always pointing to the Local Computer Policy instead of the object I want to edit. If I manually choose Add/Remove snap-in I can open and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same thing. I also tried copying gpedit.msc from a working Domain Controller and it still does the same thing. Anyone have any ideas on how to fix it? I am afraid other Administrators (or myself) might accidently edit the wrong policy because of this. Thanks in advance,
Todd
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright (c) 2009 Levittown Public Schools - All rights reserved.
| | | |
| omar
Posts:97
| | 02/03/2009 12:02 PM |
| Does it make any difference if you open GPMC and set the focus to a different domain controller and click edit on a GPO?
So if you open a new MMC and choose the GP object editor- you can choose your correct GPO and then edit it -or does that process also take you back to the local computer policy?
Can you browse to the sysvol folder on that domain controller and view each of the GPO folders and files- just to check/verify permissions against a working DC?
Do permissions look ok in GPMC for each GPO regarding who as editor rights?
within GPMC- can you select a GPO and then click on the settings tab and see all of the settings?
Lastly- have you tried logging on to the DC using a different account- maybe even one that has never logged on so you can create a new profile from the default profile?
Ok one more question- how about the links to the default domain controller and the default domain policy in the administrative tools menu- when you click on those do they also open the local security policy? Any errors in the event logs?
This is a strange one never seen it before- sorry cant be of more help-May take a call to PSS- or rerunning a service pack on the DC.
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 08:40 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] wrong object focus
I actually tried that and it has the same problem when I go to "Edit" an actual GP object.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Tuesday, February 03, 2009 11:43 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] wrong object focus
Hi Todd,
I would recommend that you download and install the Group Policy Management Console.
This will of course remove your ability to click on Edit- or even get a list of GPOs from within AD users and Computers-but it may just solve your issue and this is the tool you should be using anyway - and the bonus is that there are many more new functions.
Now if you are on a domain controller running Windows 2000- well- that product is end of life but GPMC works fine on windows 2003 and XP
hope that helps
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 06:28 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] wrong object focus
Hi All- I have a strange problem I can't fix. On one of my Domain Controllers whenever I go to edit a group policy object and click "Edit" from within AD, when the group policy object editor opens it has the wrong "focus" it is always pointing to the Local Computer Policy instead of the object I want to edit. If I manually choose Add/Remove snap-in I can open and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same thing. I also tried copying gpedit.msc from a working Domain Controller and it still does the same thing. Anyone have any ideas on how to fix it? I am afraid other Administrators (or myself) might accidently edit the wrong policy because of this. Thanks in advance,
Todd
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright © 2009 Levittown Public Schools - All rights reserved.
| | | |
| Darren
Posts:103
| | 02/03/2009 12:02 PM |
| I have seen this before but for the life of me, I can't remember what caused
it. It may be that there is something broken in the gpedit.msc console tool.
Have you tried copying this file from a different machine?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Connell, Todd F.
Sent: Tuesday, February 03, 2009 8:41 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] wrong object focus
I actually tried that and it has the same problem when I go to "Edit" an
actual GP object.
_____
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Omar Droubi
Sent: Tuesday, February 03, 2009 11:43 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] wrong object focus
Hi Todd,
I would recommend that you download and install the Group Policy Management
Console.
This will of course remove your ability to click on Edit- or even get a list
of GPOs from within AD users and Computers-but it may just solve your issue
and this is the tool you should be using anyway - and the bonus is that
there are many more new functions.
Now if you are on a domain controller running Windows 2000- well- that
product is end of life but GPMC works fine on windows 2003 and XP
hope that helps
Omar Droubi
xxxxxxxxxxxxxxxx
650-726-0300
_____
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 06:28 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] wrong object focus
Hi All- I have a strange problem I can't fix. On one of my Domain
Controllers whenever I go to edit a group policy object and click "Edit"
from within AD, when the group policy object editor opens it has the wrong
"focus" it is always pointing to the Local Computer Policy instead of the
object I want to edit. If I manually choose Add/Remove snap-in I can open
and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same
thing. I also tried copying gpedit.msc from a working Domain Controller and
it still does the same thing. Anyone have any ideas on how to fix it? I am
afraid other Administrators (or myself) might accidently edit the wrong
policy because of this. Thanks in advance,
Todd
_____
*NOTICE: This e-mail message is for the sole use of the intended
recipient(s) and may contain certain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the sender
by e-mail and delete all copies of the original message. - Copyright C 2009
Levittown Public Schools - All rights reserved.
| | | |
| tconnell
Posts:16
| | 02/03/2009 1:48 PM |
| Thanks for the suggestions Omar. Deleting the cached profile of the Administrator fixed the issue. It must have been something stuck in the user hive or some file in the profile that was causing it to get stuck on the wrong object.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Tuesday, February 03, 2009 12:03 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] wrong object focus
Does it make any difference if you open GPMC and set the focus to a different domain controller and click edit on a GPO?
So if you open a new MMC and choose the GP object editor- you can choose your correct GPO and then edit it -or does that process also take you back to the local computer policy?
Can you browse to the sysvol folder on that domain controller and view each of the GPO folders and files- just to check/verify permissions against a working DC?
Do permissions look ok in GPMC for each GPO regarding who as editor rights?
within GPMC- can you select a GPO and then click on the settings tab and see all of the settings?
Lastly- have you tried logging on to the DC using a different account- maybe even one that has never logged on so you can create a new profile from the default profile?
Ok one more question- how about the links to the default domain controller and the default domain policy in the administrative tools menu- when you click on those do they also open the local security policy? Any errors in the event logs?
This is a strange one never seen it before- sorry cant be of more help-May take a call to PSS- or rerunning a service pack on the DC.
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 08:40 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] wrong object focus
I actually tried that and it has the same problem when I go to "Edit" an actual GP object.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Tuesday, February 03, 2009 11:43 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] wrong object focus
Hi Todd,
I would recommend that you download and install the Group Policy Management Console.
This will of course remove your ability to click on Edit- or even get a list of GPOs from within AD users and Computers-but it may just solve your issue and this is the tool you should be using anyway - and the bonus is that there are many more new functions.
Now if you are on a domain controller running Windows 2000- well- that product is end of life but GPMC works fine on windows 2003 and XP
hope that helps
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Connell, Todd F. [xxxxxxxxxxxxxxxx]
Sent: Tuesday, February 03, 2009 06:28 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: [gptalk] wrong object focus
Hi All- I have a strange problem I can't fix. On one of my Domain Controllers whenever I go to edit a group policy object and click "Edit" from within AD, when the group policy object editor opens it has the wrong "focus" it is always pointing to the Local Computer Policy instead of the object I want to edit. If I manually choose Add/Remove snap-in I can open and edit other objects just fine.
I've tried re-creating gpedit.msc in Author mode and it still does the same thing. I also tried copying gpedit.msc from a working Domain Controller and it still does the same thing. Anyone have any ideas on how to fix it? I am afraid other Administrators (or myself) might accidently edit the wrong policy because of this. Thanks in advance,
Todd
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright (c) 2009 Levittown Public Schools - All rights reserved.
| | | |
|
|