[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 768
  • Last Modified:

Error modifying group policy

We are receiving an error message when we are attempting to add additional items to the "Run only allowed Windows applications" on our 2003 server.  The error we are getting says " The Group Policy snapin was unable to save your changes due to the following error:  Access is denied."  I am logged onto the system as domain administrator when attempting to make this change.  

Is anyone familar with this error message and can shed some light on what the cause may be?  Also, is there a limit as to how many items can be added to this group policy?  Does anyone know where the list of allowed applications is stored?
0
khyer123
Asked:
khyer123
  • 5
  • 3
1 Solution
 
jjmartineziiiCommented:
are you able to edit any other gpos?
0
 
khyer123Author Commented:
Yes. We are able to edit all other GPOS, just not this specific GPO. I have looked through the permissions thoroughly, and even though domain admin supposedly has rights to modify the GPO (when looking at the Effective permissions), I continuously get "access is denied" When trying to modify any part of this GPO.
0
 
jjmartineziiiCommented:
Verify your permissions to the SYSVOL folder. This is where the GPO's are stored.

Would it be difficult just to recreate the GPO?
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
khyer123Author Commented:
Thank you for your response. I'll check the SYSVOL folder permissions.

Recreating the GPO would be a last resort, it's a very large policy.
0
 
khyer123Author Commented:
Permissions to the SYSVOL folder are verified, we even added Administrator explicitly to full access and it still doesn't work.
0
 
jjmartineziiiCommented:
I'm not sure what to say, but goto to GPEdit and copy the GPO then paste into the objects. It will ask you what permissions to use, use the default permissions. Everything should still be in the new GPO.
0
 
khyer123Author Commented:
I ended up troubleshooting / fixing the problem myself -
By tracking down, copying and opening the GPO with notepad (in the sysvol folder) I could see a large portion of it was actually missing, I took it to mean part of the file went corrupt, and this was why I was having a problem. It might have happened during a power outage.

The GPO was extremely large, but we painstakingly reconstructed it policy by policy.
The replcement GPO is now working flawlessly.
0
 
khyer123Author Commented:
I ended up troubleshooting / fixing the problem myself -
By tracking down, copying and opening the GPO with notepad (in the sysvol folder) I could see a large portion of it was actually missing, I took it to mean part of the file went corrupt, and this was why I was having a problem. It might have happened during a power outage.

The GPO was extremely large, but we painstakingly reconstructed it policy by policy.
The replcement GPO is now working flawlessly.
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now