asked on

Unable to Create New GPO

I seem to be having a few problems with creating new GPO's, when I select new GPO I get prompted with the Name I would like to user, I have tried leaving it as default or change the name click on OK and get the following error message

The Security ID may not be assigned as the owner of this object.

I have tried this as my own account (Domain Admin) and also the enterterprise admin account. I have also checked the permissions in Sysvol and all seem to be ok.

Anyone have any Ideas.

Thanks

Brian Pierce

Make sure the account being used is a member of the "Group Policy Creator/Owners" security group

GarryBaker

ASKER

I have checked both accounts and they are both in the Group Policy Creator/Owners groups. Also comparied the permissions with our other system and all looks ok

Auth User - Read & Execute
Creator Owner - Full Control
Domain Admin - Full Control
Enterprise Admin - Full Control
Enterprise Domain Controllers - Read & Execute
System - Full Control

Any Ideas

GarryBaker

ASKER

I have rebooted the system but still no difference, Is it worth trying to rebuild my Sysvol using Burflags.

http://support.microsoft.com/kb/315457/

I only have one DC on this domain, so I am considering running it using the D4 flag.

ASKER CERTIFIED SOLUTION

Henrik Johansson

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

GarryBaker

ASKER

Excellent all working ok.