supporthl
asked on
Cannot Create Group Policy
Hi,
we have a client that is struggling to create group policies in there domin.
there setup is a 2003 Domain with multiple servers including SQL, FileServer and Exchange.
when they try and edit and create a GPO they receive the following error
"Failed to Create New Group Policy Object. You May not have appropriate rights
Details - Not enough server storage is available to process this command"
after googling the error i found these two MS Support Links but they dont work..
http://support.microsoft.com/kb/285089
http://support.microsoft.com/kb/304101
Any Ideas?
we have a client that is struggling to create group policies in there domin.
there setup is a 2003 Domain with multiple servers including SQL, FileServer and Exchange.
when they try and edit and create a GPO they receive the following error
"Failed to Create New Group Policy Object. You May not have appropriate rights
Details - Not enough server storage is available to process this command"
after googling the error i found these two MS Support Links but they dont work..
http://support.microsoft.com/kb/285089
http://support.microsoft.com/kb/304101
Any Ideas?
ASKER
Sorry, should have added this is using the Domain Admin account..
Well on first glance I would say they don't have permissions to create Group Policy objects. Make sure the user is in the group "Group Policy Creator Owners". As well I would suggest that you try creating them directly on the Domain Controller itself just to test and make sure it is not a DNS/AD issue.
Check the space on the PDC emulator? Are they modifying from their machines or on the DC (although it should not matter).
What error messages are you seeing in the event logs?
Thanks
Mike
What error messages are you seeing in the event logs?
Thanks
Mike
ASKER
ok, i am seeing this message now, nothing has changed apart form the two MS Links above
"Not enough server storage is available to process this command"
the server has 36.4gb free on the primary partition
i have tried creating a new account and trying again but still does the same.
"Not enough server storage is available to process this command"
the server has 36.4gb free on the primary partition
i have tried creating a new account and trying again but still does the same.
I would recommend trying directly from one of the DC's to determine if this is a AD/DNS issue.
ASKER
i have tried this on the Primary Domain Controller....
Did you create the IRPStackSize key, and what value did you set?
Also, did you restart the server service after setting a value?
Also, did you restart the server service after setting a value?
Check the permission sysvol folder.
Enable File and Printer Sharing for Microsoft Networks on the NIC setting if not enabled.
If the IRPStackSize is created increase the vaule by 3 and reboot the server for the setting to take effect and then try.
Enable File and Printer Sharing for Microsoft Networks on the NIC setting if not enabled.
If the IRPStackSize is created increase the vaule by 3 and reboot the server for the setting to take effect and then try.
ASKER
yes i created the IRPStackSize ket and its set to the value of 0x00000032 (50)
the permission on the sysvol folder has full administrators group access
and file and printer sharing is enabled
isnt the IRPStackSize at its maximum? according to the MS link? or have i misread it?
good answers guys, thanks
the permission on the sysvol folder has full administrators group access
and file and printer sharing is enabled
isnt the IRPStackSize at its maximum? according to the MS link? or have i misread it?
good answers guys, thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
"To create a GPO, you must have GPO creation privileges. By default only domain administrators, enterprise administrators, and members of the Group Policy creator owners group can create Group Policy objects. To delegate GPO creation permissions to additional groups and users, go to Group Policy Objects in the desired domain and click the Delegation tab."