Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Can't edit Group Policy Object

Posted on 2014-01-07
3
6,302 Views
Last Modified: 2014-01-08
I have come to edit a GPO that was created quite a while ago but the "edit" bit of the menu is greyed out and I can't edit it.
Using Server 2012 standard.

What could the problem be?
0
Comment
Question by:paulmac110
3 Comments
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39762295
It sounds like the user you are using lacks the edit permission to the GPO. Select the delegation tab on the GPO and ensure you have edit settings,delete,modify security.
0
 
LVL 12

Accepted Solution

by:
Sandeep earned 500 total points
ID: 39762358
Check what permissions are there on the GPO.

http://technet.microsoft.com/en-us/library/cc781991(v=ws.10).aspx

Default rights are as below :-
Edit settings, delete, modify security for

Domain Administrators
Enterprise Administrators
Creator Owner
SYSTEM

To Delegate Controls

To delegate Group Policy administrative tasks on a container
To delegate Group Policy-related permission on a site, domain, or OU, click the appropriate container in the GPMC console.

In the right pane for the site, domain, or OU, click the Delegation tab.

In the drop-down list box, select the desired permission you want to manage: Link GPOs, Perform Group Policy Modeling analyses, or Read Group Policy Results data. Note that GP Modeling and GP Results are not available for sites.

To add new groups, use the Add button.

To modify the Applies To setting for an existing permission, right-click the user or group in the list and then select either This container only or This container and all child containers.

To remove an existing group or user from having the specified permission, select the user or group from the list and click the Remove button. Only domain administrators have permission to do this.

To add or remove custom permissions, click Advanced at the bottom-right of the details pane and select the object whose permissions you want to change. Note that setting custom permissions is not recommended.
0
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39762498
Cross verify user ID is part of Group Policy Creator Owners group.

If you are facing this issue on particular DC / Server, try deleting the profile from computer properties, advanced systems settings, user profiles,

After deleting profile your profile will load freshly and try.
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question