GPO backup shows error only on one policy
I have a problem and am sorta clueless where exactly to look it. When I do a policy backup on GPMC I get this one policy error. This is tied to about 300 clients. The server and domain names were modified to protect the innocent.
GPO: User Policies...Failed
The overall error was: The system cannot find the file specified.
Additional details follow.
The task cannot be completed. There was an error with extension [Core Extension]. The attributes of Directory Services object [LDAP://MP555-Test.MP555.E
The following error occurred:
The system cannot find the file specified.
GPO: User Policies...Failed
The overall error was: The system cannot find the file specified.
Additional details follow.
The task cannot be completed. There was an error with extension [Core Extension]. The attributes of Directory Services object [LDAP://MP555-Test.MP555.E
The following error occurred:
The system cannot find the file specified.
Sandesh Dubey
Have you verified the poicy guid is present in policies folder of sysvol?
ASKER
When I go the sysvol folder and search for "2250311C-9613-478B-B303-A
Have you posted any attachment as we cannot view the same.
ASKER
I sent a jpeg snapshot of the two folders in sysvol. Attaching again. (Oh...I forgot to upload it. duh)
user-policy.jpg
user-policy.jpg
Have you verified the permission on the policy quid if the user in question is admin add the user and check.
ASKER
In my case are you referring to the "user-Policies" scope or the delegations?
NTFS Permission on the policy guild folder.Are you able to edit the policy from GPMC console do you report any error.?It seems to me that policy is corrupted
Open cmd and run gpotool and post the log.If gpotool command is notworking you need to download resource kit tool will work for both Win2003/2k8.http://www.microsoft.com/en-in/download/details.aspx?id=17657
Open cmd and run gpotool and post the log.If gpotool command is notworking you need to download resource kit tool will work for both Win2003/2k8.http://www.microsoft.com/en-in/download/details.aspx?id=17657
ASKER
yes! I can edit the policy on the GPMC. I've seen corrupted policies before and this does'nt act like that. I couldn't find gpotool before so thanks for the link. Will let you know...
ASKER
Okay I ran gpotool. Nice program. Please see attached.
user-Policies.txt
user-Policies.txt
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Have you tried the gpfixup command yet?
http://technet.microsoft.com/en-us/library/hh852336(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh852336(v=ws.10).aspx
Have you tried to back the GP from a DC directly?
ASKER
Fixed it. The gpt.ini was completely missing. I copied it from another policy, checked the permissions...they were good. I then checked the default permissions and the domain and enterprise admins were not set correctly. I can now back up that policy.
All the other parameters covered were good as is. Thank You!
All the other parameters covered were good as is. Thank You!