?
Solved

GPO -  Change Local Admin password policy results with access denied on some machines

Posted on 2013-01-18
7
Medium Priority
?
1,084 Views
Last Modified: 2013-01-29
I've created a GPO for changing the local administrator password on our Windows XP and 7 machines. I'm testing it on a group of 3 computers.

_______________________________________
On my Win 7 pro 64bit I get:
 
"Windows failed to apply the Group Policy Local Users and Groups settings. Group
Policy Local Users and Groups settings might have its own log file. Please click
 on the "More information" link.

For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results."
_________________________________

This is the result of the GP result report:
Component Status
Component Name Status Last Process Time
Group Policy Infrastructure Success 1/18/2013 2:14:35 PM
Group Policy Local Users and Groups Failed 1/18/2013 2:14:34 PM
Group Policy Local Users and Groups failed due to the error listed below.

Access is denied.

Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/18/2013 2:14:34 PM and 1/18/2013 2:14:34 PM.
 
Registry Success 1/18/2013 2:14:34 PM
Security Success 1/18/2013 2:14:35 PM
_____________________________

The event viewer just says access denied. When I do GP modeling there are no errors.
The other two computers don't give an error but the admin password has not changed.

Any guidance anyone?

Thansk
0
Comment
Question by:mauisun
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38794849
Are you also using the GPO to rename the admin accounts??

http://support.microsoft.com/kb/816109
0
 
LVL 1

Author Comment

by:mauisun
ID: 38794855
no. I'm just trying to change the password.
I know that part of the GPO is making it... I've set the enable administrator account property and that shows up when I run rsop on the machine.
0
 
LVL 40

Expert Comment

by:footech
ID: 38794858
Are you applying the GPO to an OU with the specific computers in it?

What do you have for security filtering on the GPO?  If it is a security group with the computers as members, have the computers been rebooted since being made a member of the group?
0
10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

 
LVL 1

Author Comment

by:mauisun
ID: 38794880
I'm applying the GPO to a security group with 3 specific computers that are members. Yes. One of the test machines is my own. I've rebooted a bunch of times as well as running gpupdate /force
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38794885
Reason I asked,  was in case some of the admins names were not the same(in synch)
0
 
LVL 1

Accepted Solution

by:
mauisun earned 0 total points
ID: 38815610
I figured it out.
0
 
LVL 1

Author Closing Comment

by:mauisun
ID: 38830332
I figured out that I put too many updates in one policy.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question