Solved

Cannot Create Group Policy

Posted on 2011-09-12
13
201 Views
Last Modified: 2012-12-16
Hi,

we have a client that is struggling to create group policies in there domin.

there setup is a 2003 Domain with multiple servers including SQL, FileServer and Exchange.

when they try and edit and create a GPO they receive the following error

"Failed to Create New Group Policy Object. You May not have appropriate rights
Details - Not enough server storage is available to process this command"

after googling the error i found these two MS Support Links but they dont work..
http://support.microsoft.com/kb/285089 
http://support.microsoft.com/kb/304101 

Any Ideas?

0
Comment
Question by:supporthl
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
13 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36522546
What type of permissions does the account they are using have? By default only domain admins have access to create group policies unless that right has been delegated to other users.

"To create a GPO, you must have GPO creation privileges. By default only domain administrators, enterprise administrators, and members of the Group Policy creator owners group can create Group Policy objects. To delegate GPO creation permissions to additional groups and users, go to Group Policy Objects in the desired domain and click the Delegation tab."
0
 

Author Comment

by:supporthl
ID: 36522560
Sorry, should have added this is using the Domain Admin account..

0
 
LVL 1

Expert Comment

by:Ryan Rood
ID: 36522596
Well on first glance I would say they don't have permissions to create Group Policy objects. Make sure the user is in the group "Group Policy Creator Owners". As well I would suggest that you try creating them directly on the Domain Controller itself just to test and make sure it is not a DNS/AD issue.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 57

Expert Comment

by:Mike Kline
ID: 36522704
Check the space on the PDC emulator?   Are they modifying from their machines or on the DC (although it should not matter).

What error messages are you seeing in the event logs?

Thanks

Mike
0
 

Author Comment

by:supporthl
ID: 36522728
ok, i am seeing this message now, nothing has changed apart form the two MS Links above

"Not enough server storage is available to process this command"

the server has 36.4gb free on the primary partition

i have tried creating a new account and trying again but still does the same.
0
 
LVL 1

Expert Comment

by:Ryan Rood
ID: 36522733
I would recommend trying directly from one of the DC's to determine if this is a AD/DNS issue.
0
 

Author Comment

by:supporthl
ID: 36522780
i have tried this on the Primary Domain Controller....

0
 
LVL 21

Expert Comment

by:snusgubben
ID: 36523786
Did you create the IRPStackSize key, and what value did you set?

Also, did you restart the server service after setting a value?
0
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36527413
Check the permission sysvol folder.
Enable File and Printer Sharing for Microsoft Networks on the NIC setting if not enabled.
If the IRPStackSize is created increase the vaule by 3 and reboot the server for the setting to take effect and then try.
0
 

Author Comment

by:supporthl
ID: 36528162
yes i created the IRPStackSize ket and its set to the value of 0x00000032 (50)

the permission on the sysvol folder has full administrators group access
and file and printer sharing is enabled

isnt the IRPStackSize at its maximum? according to the MS link? or have i misread it?

good answers guys, thanks
0
 

Accepted Solution

by:
supporthl earned 0 total points
ID: 38011865
this was resolved, called Microsoft and used a support ticked!

Thanks for your input
0
 
LVL 26

Expert Comment

by:Pber
ID: 38695517
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question