I just finished creating a copy of my Windows 2000 domain on a separate network segment from my AD production. I followed all the instructions on creating a test domain here:
After cleaning up the Event viewer, DNS,FRS,AD etc. It seems like the AD is working just fine. However, I ran into a problem ( I don't know how severe it is..)
If I go to: Start>Programs/Administrat
ive Tools>Domain Security Policy, I receive an error: "Failed to open GPO. You may not have appropriate rights. Details: The specified domain either does not exist or could not be contacted."
I also get the same error message when I try to launch the Domain Controller Security policy. But if I go to Start>Run and type "dompol.msc" or "dcpol.msc" they both work.!
Everything else works, i.e Active Directory Domains and Trusts, Active Directory Sites and Services, Active Directory Users and Computers. I've created this test environment in order to test an upgrade to a 2003 AD. But I just want to fix those two issues before continuing testing.
I have also checked and verified the permissions for the Ntds.dit file and NTDS directory, they both have the correct permissions.
I can also create new GPOs or edit existing GPOs without any error messages.
Thanks for your time.