Solved

dcgpofix not working -getting  ldap error

Posted on 2006-10-27
5
1,168 Views
Last Modified: 2010-08-05
today i denieid the apply group policy and the read permissions to the enterprise admins group for the default domain policy gpo with the hope of blocking certain settings from that group, what happened after was the gpo immediately went to "inaccessible", and the policies set to be applied across the domain were not applied tot the whole network. i deleted the link from the gpmc console then i went to the sysvol folder found the corresponding policy sid folder and gave the enterprise admin full control. i then ran the dcgpofix command and i am getting this error "could not open active directory object ldap:// etc" the specified sid id folder here have all the appropriate permissions. i need to know where else do i need to go to make changes so the command will follow through.

the default policy had some very important settings like the firewall on it so i recreated anothe rgpo linked it to the domain and put the settings on it, this works across the domain but if i go to the control panel/admin tools /domain security policy..........................i get an error because the shorcut still points to the original folder, i changed this on one dc to reflect the new gpo i created. which it then opened the the gpo for modification.


i still need to restore the original default policy please help,,,,,,,,,,,,,,,my solution is only a temporary one.
0
Comment
Question by:hclgroup
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 17821122
Find the GUID in ADUC (Advanced View) under System>Policies.

Add back Domain Admins, Enterprise Admins and SYSTEM (full control).

0
 
LVL 4

Author Comment

by:hclgroup
ID: 17821372
i found re-applied the permissions and i realise that in the permissions list the apply group policy object is not there,,,,,,,,,,,,,,,,,,there are only folder permissions
0
 
LVL 51

Expert Comment

by:Netman66
ID: 17821487
Those "folder" permissions are actually the ACL on the Policy itself.  Once those groups have access, you should then be able to edit them.

0
 
LVL 4

Author Comment

by:hclgroup
ID: 17821677
thanks netman,,,,, the problem was i had some special permissions denied...how i don't know once i allowed full control on everything for the enterprise and domain admin the dcgpofix went through and the old default policy showed up. this was strange because when i looked earlier in my gpo backup folder it was not there. once i ran the command it ws listed in the group policy objects ad i was able to restore it from two days ago.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 17822359
Excellent.

Glad to help.
NM
0

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question