GPO - Change Local Admin password policy results with access denied on some machines
Posted on 2013-01-18
I've created a GPO for changing the local administrator password on our Windows XP and 7 machines. I'm testing it on a group of 3 computers.
On my Win 7 pro 64bit I get:
"Windows failed to apply the Group Policy Local Users and Groups settings. Group
Policy Local Users and Groups settings might have its own log file. Please click
on the "More information" link.
For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results."
This is the result of the GP result report:
Component Name Status Last Process Time
Group Policy Infrastructure Success 1/18/2013 2:14:35 PM
Group Policy Local Users and Groups Failed 1/18/2013 2:14:34 PM
Group Policy Local Users and Groups failed due to the error listed below.
Access is denied.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/18/2013 2:14:34 PM and 1/18/2013 2:14:34 PM.
Registry Success 1/18/2013 2:14:34 PM
Security Success 1/18/2013 2:14:35 PM
The event viewer just says access denied. When I do GP modeling there are no errors.
The other two computers don't give an error but the admin password has not changed.
Any guidance anyone?