Cant access Group Policy's after domain Rename

We had to change the name of our domain because our parent company changed its name. We followed the 80+ page document that microsoft provided. However, Some things must have not been changed. When I try and open the Domain Security Policy or the Domain Controller Security Policy I get this error:

"Failed to open the Group Policy Object. You may not have appropriate rights. The specified domain either does not exist or could not be contacted."

From we can tell, everything worked fine in the rename process. We never got any errors? DNS is updated, all of the workstations login to the new domain, all the shares work.  

One other thing is that when I open ASDIEDIT, I see the old domain name on the "Domain" "Configuration" and "Schema"

I assume that somewhere in the process of renaming the domain we missed something or something did not update to the new domain correctly.  Thanks in advance for any suggestions.
cwellsatlAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ryansotoCommented:
Ouch - domain rename fails about 40-60% of the time and if it doesnt fail issues like this occur -
My suggestion for the group policies is to rebuild from scratch unfortunately.  Its been my experience that restore those will not working after a rename has been done
0
cwellsatlAuthor Commented:
yeah, thats what I thought would be the answer. My concern is if GP does not work what else is broken? I dont want to be paying for this problem for years to come. And we are going to have to connect this domain to the parent company (in europe) via a trust next week. As all of our email will go to their exchange server which will then forward it over the MPLS circuit to our exchange server. So that is a whole other can of worms that can get pretty messy if AD is messed up.
0
ryansotoCommented:
Sure can.....
I cant help with the other specific issues that you stated you were having -
Most of the time I (and my clients) find it faster and more efficient to rebuild the domain.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

cwellsatlAuthor Commented:
We are trying to make this Domain Work anyway. I figured out that one of the steps in the document that was under Miscellaneous Tasks was not completed and the Secutiry Policies work now. However, When I go to check the FSMO Roles under Operations Masters, They still show the old name. I have not deleted the old DNS Zones yet. But wonder if I do will the new name show up under Operations Masters?
0
ryansotoCommented:
Probably not you may need to run a meta data clean up (way to clean up old or outdated objects from AD)
http://technet.microsoft.com/en-us/library/cc736378.aspx
0
cwellsatlAuthor Commented:
Sorry for the late post. I did manage to fix it. It seems that it did not populate all of the information in DNS. I manaually added the needed information and rebooted. Has been working great ever since. Thanks for the suggestions.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.