Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Error 0x5  opening group policy Exchange 2007 install

Posted on 2007-07-25
Medium Priority
Last Modified: 2010-05-18
I am installing Exchange 2007 on a new server in an existing AD Domain with 1 2003 exchange server all the preparations have been fine and the readiness check has passed , though I did have to move from mixed mode to Native 2003 for both the exchange server and Active directory.
The install then fails with the following error

"Error 0x5  opening group policy on system dc1.xyz.com in domain xyz.com "

I have checked the rights the account being used for the exchange install is is a member of domain admins.

any help would be appreciated
Question by:EGC
  • 3
  • 3
LVL 13

Expert Comment

ID: 19566415
Read this article(s)
Verify that you active directory is HEALTHY no abonded domain controllers that were demoted and objects still remain in active directory .The installation might point to one of those servers and fail.
Before you run the instlalation
run this command
set logonserver
and check the server is it the right server ?

Author Comment

ID: 19572188
I have cjecked the logonserver and that is corrcet , I have also checked thr security rigts per the echange.org articles.

LVL 13

Expert Comment

ID: 19572323
ok COULD you just verify that there are no domain controllers that were abondened for instance how many domain controllers show up in domain controllers OU.Are all of those actually working on the site & are physically available??
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.


Author Comment

ID: 19572902
Yes there is 3 in total 2 local and one in a remote office one of the 2 is the operations master and pdc emulator and the one that is detailed in the error.


Author Comment

ID: 19573032
I have found more detail in the setup log  .....

[7/26/2007 10:32:09 AM] [2] Used domain controller XYZdc2.XYZ.co.uk to write object CN=Microsoft Exchange System Objects,DC=XYZ,DC=co,DC=uk
[7/26/2007 10:32:10 AM] [2] [ERROR] Unexpected Error
[7/26/2007 10:32:10 AM] [2] [ERROR] Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [2] Ending processing.
[7/26/2007 10:32:10 AM] [1] The following 1 error(s) occurred during task execution:
[7/26/2007 10:32:10 AM] [1] 0.  ErrorRecord: Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] 0.  ErrorRecord: Microsoft.Exchange.Management.Tasks.OpenPolicyFailedException: Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] [ERROR] Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] Setup is halting task execution because of one or more errors in a critical task.
[7/26/2007 10:32:10 AM] [1] Finished executing component tasks.
[7/26/2007 10:32:10 AM] [1] Ending processing.

LVL 13

Accepted Solution

consultkhan earned 1500 total points
ID: 19583680
with this ox5 access denied error you might be getting application log erros on domain controllers check for the following on the DC
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/2/2006
Time: 12:37:39 PM
User: N/A
Computer: <yourdcname>
Security policies are propagated with warning. 0x5 : Access is denied.



Expert Comment

ID: 24721231
What is the solution?  We have the same issue, and do not have errors in the event log.

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes Top 9 Exchange troubleshooting utilities that every Exchange Administrator should know. Most of the utilities are available free of cost. List of tools that I am going to explain in this article are:   Microsoft Remote Con…
In this post, we will learn to set up the Group Naming policy and will see how it is going to impact the Display Name and the Email addresses of the Group.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month11 days, 17 hours left to enroll

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question