Link to home
Start Free TrialLog in
Avatar of trivalent
trivalent

asked on

Group Policy 'inaccessible' - shows only GUID?

I'm trying to deploy Group Policy in a SBS 2003 Environment with a Terminal Server (not a DC).

So I have a OU with the Terminal Server object in it, and I've created four policies and linked them to it.  I am following a best practice guide for TS / GPO rollout by creating a Computer config that has the User Config disabled, and three User Configs that have the Computer configs disabled.  The User config depends on Security Group membership.

When running a RSOP on a user that is a member of one of the security groups, I am getting some strange results -

The GPOs that I created in for my TS OU all come back as Denied,  'Inaccessible' for the Reason.  It's also strange to me that it only shows the GUID (E33DA2A8-D5FF-48DD-93B5-74D2D738F468) instead of the actual name.

I'm also getting a lot of "Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this." in the Event Viewer.

Any help would be much appreciated!  High points.

Jason
ASKER CERTIFIED SOLUTION
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of trivalent
trivalent

ASKER

I got it figured out - it appears there is something wrong with the GPMC.  I also had the Folder Ownership incorrect.
Okay, kind of figured out.  It is loading just fine, though it says it can't find descriptions.  I am able to load up the settings correctly and the option is in the drop down.  When I link it, however, and run gpresult or the wizard for RSoP, the policy isn't referenced at all, not in applied, nor denied.  It also loads under the computer settings and I'm not sure why, as the copied portion was from User settings, although I didn't specify one or the other in the file, as you can see above.
^ woops.. wrong window EE window.  
How did you reslove this problem?