Trying to access Local Group Policy.  Get Error "You do not have permission to perform this operation"

Posted on 2008-07-15
Medium Priority
Last Modified: 2013-11-21
I have  a couple terminal servers - not set up by me- running Windows Server 2003 that I cannot edit the local security policy on.  When I type "gpedit.msc" I get a "Group Policy Error" window with the error "You do not have permission to perform this operation" and "Access is Denied".  I've tried the local administrator account on the box, my domain admin account to no avail.  The server is on a domain, but the Default Domain policy doesn't seem to have any settings that would block local security policy access, and any other servers except these terminal servers allow local security policy access.  The default policy in the domain, using GPRESULT, seems to be the only policy applied.  I don't know if the former terminal server admin tried locking these down and messed something up. Any ideas?
Question by:Darthyw
LVL 59

Accepted Solution

Darius Ghassem earned 2000 total points
ID: 22008788

Author Comment

ID: 22008895
SWEET!  The second link had the fix:

The issue may occur if the current user account (although it is an
administrator account) does not have access to some necessary files or
registry. Please check to ensure that the current user has full control on
the following folder and does NOT have any Deny item:


Someone set the Admins to deny on everything.  

Much Thanks!!

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
Seizing the Operation Master Roles in Windows Server 2016 in case of FSMO holder failure.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question