• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1336
  • Last Modified:

Error 0x5 opening group policy Exchange 2007 install

I am installing Exchange 2007 on a new server in an existing AD Domain with 1 2003 exchange server all the preparations have been fine and the readiness check has passed , though I did have to move from mixed mode to Native 2003 for both the exchange server and Active directory.
The install then fails with the following error

"Error 0x5  opening group policy on system dc1.xyz.com in domain xyz.com "

I have checked the rights the account being used for the exchange install is is a member of domain admins.

any help would be appreciated
  • 3
  • 3
1 Solution
Read this article(s)
Verify that you active directory is HEALTHY no abonded domain controllers that were demoted and objects still remain in active directory .The installation might point to one of those servers and fail.
Before you run the instlalation
run this command
set logonserver
and check the server is it the right server ?
EGCAuthor Commented:
I have cjecked the logonserver and that is corrcet , I have also checked thr security rigts per the echange.org articles.

ok COULD you just verify that there are no domain controllers that were abondened for instance how many domain controllers show up in domain controllers OU.Are all of those actually working on the site & are physically available??
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

EGCAuthor Commented:
Yes there is 3 in total 2 local and one in a remote office one of the 2 is the operations master and pdc emulator and the one that is detailed in the error.

EGCAuthor Commented:
I have found more detail in the setup log  .....

[7/26/2007 10:32:09 AM] [2] Used domain controller XYZdc2.XYZ.co.uk to write object CN=Microsoft Exchange System Objects,DC=XYZ,DC=co,DC=uk
[7/26/2007 10:32:10 AM] [2] [ERROR] Unexpected Error
[7/26/2007 10:32:10 AM] [2] [ERROR] Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [2] Ending processing.
[7/26/2007 10:32:10 AM] [1] The following 1 error(s) occurred during task execution:
[7/26/2007 10:32:10 AM] [1] 0.  ErrorRecord: Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] 0.  ErrorRecord: Microsoft.Exchange.Management.Tasks.OpenPolicyFailedException: Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] [ERROR] Got error 0x5 opening group policy on system XYZdc2.XYZ.co.uk in domain XYZ.
[7/26/2007 10:32:10 AM] [1] Setup is halting task execution because of one or more errors in a critical task.
[7/26/2007 10:32:10 AM] [1] Finished executing component tasks.
[7/26/2007 10:32:10 AM] [1] Ending processing.

with this ox5 access denied error you might be getting application log erros on domain controllers check for the following on the DC
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/2/2006
Time: 12:37:39 PM
User: N/A
Computer: <yourdcname>
Security policies are propagated with warning. 0x5 : Access is denied.


What is the solution?  We have the same issue, and do not have errors in the event log.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now