GPO - Change Local Admin password policy results with access denied on some machines
I've created a GPO for changing the local administrator password on our Windows XP and 7 machines. I'm testing it on a group of 3 computers.
__________________________
On my Win 7 pro 64bit I get:
"Windows failed to apply the Group Policy Local Users and Groups settings. Group
Policy Local Users and Groups settings might have its own log file. Please click
on the "More information" link.
For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results."
__________________________
This is the result of the GP result report:
Component Status
Component Name Status Last Process Time
Group Policy Infrastructure Success 1/18/2013 2:14:35 PM
Group Policy Local Users and Groups Failed 1/18/2013 2:14:34 PM
Group Policy Local Users and Groups failed due to the error listed below.
Access is denied.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/18/2013 2:14:34 PM and 1/18/2013 2:14:34 PM.
Registry Success 1/18/2013 2:14:34 PM
Security Success 1/18/2013 2:14:35 PM
__________________________
The event viewer just says access denied. When I do GP modeling there are no errors.
The other two computers don't give an error but the admin password has not changed.
Any guidance anyone?
Thansk
__________________________
On my Win 7 pro 64bit I get:
"Windows failed to apply the Group Policy Local Users and Groups settings. Group
Policy Local Users and Groups settings might have its own log file. Please click
on the "More information" link.
For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results."
__________________________
This is the result of the GP result report:
Component Status
Component Name Status Last Process Time
Group Policy Infrastructure Success 1/18/2013 2:14:35 PM
Group Policy Local Users and Groups Failed 1/18/2013 2:14:34 PM
Group Policy Local Users and Groups failed due to the error listed below.
Access is denied.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/18/2013 2:14:34 PM and 1/18/2013 2:14:34 PM.
Registry Success 1/18/2013 2:14:34 PM
Security Success 1/18/2013 2:14:35 PM
__________________________
The event viewer just says access denied. When I do GP modeling there are no errors.
The other two computers don't give an error but the admin password has not changed.
Any guidance anyone?
Thansk
ASKER
no. I'm just trying to change the password.
I know that part of the GPO is making it... I've set the enable administrator account property and that shows up when I run rsop on the machine.
I know that part of the GPO is making it... I've set the enable administrator account property and that shows up when I run rsop on the machine.
Are you applying the GPO to an OU with the specific computers in it?
What do you have for security filtering on the GPO? If it is a security group with the computers as members, have the computers been rebooted since being made a member of the group?
What do you have for security filtering on the GPO? If it is a security group with the computers as members, have the computers been rebooted since being made a member of the group?
ASKER
I'm applying the GPO to a security group with 3 specific computers that are members. Yes. One of the test machines is my own. I've rebooted a bunch of times as well as running gpupdate /force
Reason I asked, was in case some of the admins names were not the same(in synch)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I figured out that I put too many updates in one policy.
http://support.microsoft.com/kb/816109