?
Solved

GPO -  Change Local Admin password policy results with access denied on some machines

Posted on 2013-01-18
7
Medium Priority
?
1,096 Views
Last Modified: 2013-01-29
I've created a GPO for changing the local administrator password on our Windows XP and 7 machines. I'm testing it on a group of 3 computers.

_______________________________________
On my Win 7 pro 64bit I get:
 
"Windows failed to apply the Group Policy Local Users and Groups settings. Group
Policy Local Users and Groups settings might have its own log file. Please click
 on the "More information" link.

For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results."
_________________________________

This is the result of the GP result report:
Component Status
Component Name Status Last Process Time
Group Policy Infrastructure Success 1/18/2013 2:14:35 PM
Group Policy Local Users and Groups Failed 1/18/2013 2:14:34 PM
Group Policy Local Users and Groups failed due to the error listed below.

Access is denied.

Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/18/2013 2:14:34 PM and 1/18/2013 2:14:34 PM.
 
Registry Success 1/18/2013 2:14:34 PM
Security Success 1/18/2013 2:14:35 PM
_____________________________

The event viewer just says access denied. When I do GP modeling there are no errors.
The other two computers don't give an error but the admin password has not changed.

Any guidance anyone?

Thansk
0
Comment
Question by:mauisun
  • 4
  • 2
7 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38794849
Are you also using the GPO to rename the admin accounts??

http://support.microsoft.com/kb/816109
0
 
LVL 1

Author Comment

by:mauisun
ID: 38794855
no. I'm just trying to change the password.
I know that part of the GPO is making it... I've set the enable administrator account property and that shows up when I run rsop on the machine.
0
 
LVL 41

Expert Comment

by:footech
ID: 38794858
Are you applying the GPO to an OU with the specific computers in it?

What do you have for security filtering on the GPO?  If it is a security group with the computers as members, have the computers been rebooted since being made a member of the group?
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
LVL 1

Author Comment

by:mauisun
ID: 38794880
I'm applying the GPO to a security group with 3 specific computers that are members. Yes. One of the test machines is my own. I've rebooted a bunch of times as well as running gpupdate /force
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38794885
Reason I asked,  was in case some of the admins names were not the same(in synch)
0
 
LVL 1

Accepted Solution

by:
mauisun earned 0 total points
ID: 38815610
I figured it out.
0
 
LVL 1

Author Closing Comment

by:mauisun
ID: 38830332
I figured out that I put too many updates in one policy.
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Most folks would know the basics of how Dropbox works, so that’s not the purpose of this article. Security is what it’s all about, so here I’ll share how I choose to secure my Dropbox Account and the Data it contains.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question