Error modifying group policy

We are receiving an error message when we are attempting to add additional items to the "Run only allowed Windows applications" on our 2003 server.  The error we are getting says " The Group Policy snapin was unable to save your changes due to the following error:  Access is denied."  I am logged onto the system as domain administrator when attempting to make this change.  

Is anyone familar with this error message and can shed some light on what the cause may be?  Also, is there a limit as to how many items can be added to this group policy?  Does anyone know where the list of allowed applications is stored?
LVL 4
khyer123Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jjmartineziiiCommented:
are you able to edit any other gpos?
0
khyer123Author Commented:
Yes. We are able to edit all other GPOS, just not this specific GPO. I have looked through the permissions thoroughly, and even though domain admin supposedly has rights to modify the GPO (when looking at the Effective permissions), I continuously get "access is denied" When trying to modify any part of this GPO.
0
jjmartineziiiCommented:
Verify your permissions to the SYSVOL folder. This is where the GPO's are stored.

Would it be difficult just to recreate the GPO?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

khyer123Author Commented:
Thank you for your response. I'll check the SYSVOL folder permissions.

Recreating the GPO would be a last resort, it's a very large policy.
0
khyer123Author Commented:
Permissions to the SYSVOL folder are verified, we even added Administrator explicitly to full access and it still doesn't work.
0
jjmartineziiiCommented:
I'm not sure what to say, but goto to GPEdit and copy the GPO then paste into the objects. It will ask you what permissions to use, use the default permissions. Everything should still be in the new GPO.
0
khyer123Author Commented:
I ended up troubleshooting / fixing the problem myself -
By tracking down, copying and opening the GPO with notepad (in the sysvol folder) I could see a large portion of it was actually missing, I took it to mean part of the file went corrupt, and this was why I was having a problem. It might have happened during a power outage.

The GPO was extremely large, but we painstakingly reconstructed it policy by policy.
The replcement GPO is now working flawlessly.
0
khyer123Author Commented:
I ended up troubleshooting / fixing the problem myself -
By tracking down, copying and opening the GPO with notepad (in the sysvol folder) I could see a large portion of it was actually missing, I took it to mean part of the file went corrupt, and this was why I was having a problem. It might have happened during a power outage.

The GPO was extremely large, but we painstakingly reconstructed it policy by policy.
The replcement GPO is now working flawlessly.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.