GPO Error Message

Hello Experts:

I just finished creating a copy of my Windows 2000 domain on a separate network segment from my AD production. I followed all the instructions on creating a test domain here:

http://71.214.146.184:443/windows/articles/testdomain.html

After cleaning up the Event viewer, DNS,FRS,AD etc. It seems like the AD is working just fine. However, I ran into a problem ( I don't know how severe it is..)

If I go to: Start>Programs/Administrative Tools>Domain Security Policy, I receive an error: "Failed to open GPO. You may not have appropriate rights. Details: The specified domain either does not exist or could not be contacted."

I also get the same error message when I try to launch the Domain Controller Security policy. But if I go to Start>Run and type "dompol.msc" or "dcpol.msc" they both work.!

Everything else works, i.e Active Directory Domains and Trusts, Active Directory Sites and Services, Active Directory Users and Computers. I've created this test environment in order to test an upgrade to a 2003 AD. But I just want to fix those two issues before continuing testing.
I have  also  checked and verified the permissions for  the Ntds.dit file and NTDS directory, they both have the correct permissions.
I can also create new GPOs or edit existing GPOs without any error messages.

Thanks for your time.

manthaxAsked:
Who is Participating?
 
Nirmal SharmaSolution ArchitectCommented:
Hi,

Please check out here:

http://support.microsoft.com/kb/240363
0
 
Nirmal SharmaSolution ArchitectCommented:
Use Dcgpofix.exe tool to re-create domain GPO.

http://support.microsoft.com/kb/555647
0
 
manthaxAuthor Commented:
Hello SystmProg,

I forgot to mention that I already tried the DCgpofix, but that did not work. I also followed the link that you provided, but that actually made things worse. So I am in the process of demoting the server and starting from scracth again.
When I performed the authoritative restore I only backedup the System state file, but not the Sysvol.Do I need to backup and restore the Sysvol as well?
0
 
manthaxAuthor Commented:
Hi SystmProg ,

Thanks for the link that did it..! However, I still had to manually create the share permissons for both the Sysvol and the scripts directories. Once that was done, AD stopped complaining. Thanks for all your help.!

Now I can start testing this domain upgrade to server 2003, and also play around with my first Exchange server install.  

Sweet..! (with a Cartman voice..)

Best regards,
0
 
Nirmal SharmaSolution ArchitectCommented:
Glad to assist!

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.