Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 9452
  • Last Modified:

Can't edit Group Policy Object

I have come to edit a GPO that was created quite a while ago but the "edit" bit of the menu is greyed out and I can't edit it.
Using Server 2012 standard.

What could the problem be?
0
paulmac110
Asked:
paulmac110
1 Solution
 
Joseph MoodyBlogger and wearer of all hats.Commented:
It sounds like the user you are using lacks the edit permission to the GPO. Select the delegation tab on the GPO and ensure you have edit settings,delete,modify security.
0
 
SandeepSr System AdministratorCommented:
Check what permissions are there on the GPO.

http://technet.microsoft.com/en-us/library/cc781991(v=ws.10).aspx

Default rights are as below :-
Edit settings, delete, modify security for

Domain Administrators
Enterprise Administrators
Creator Owner
SYSTEM

To Delegate Controls

To delegate Group Policy administrative tasks on a container
To delegate Group Policy-related permission on a site, domain, or OU, click the appropriate container in the GPMC console.

In the right pane for the site, domain, or OU, click the Delegation tab.

In the drop-down list box, select the desired permission you want to manage: Link GPOs, Perform Group Policy Modeling analyses, or Read Group Policy Results data. Note that GP Modeling and GP Results are not available for sites.

To add new groups, use the Add button.

To modify the Applies To setting for an existing permission, right-click the user or group in the list and then select either This container only or This container and all child containers.

To remove an existing group or user from having the specified permission, select the user or group from the list and click the Remove button. Only domain administrators have permission to do this.

To add or remove custom permissions, click Advanced at the bottom-right of the details pane and select the object whose permissions you want to change. Note that setting custom permissions is not recommended.
0
 
Manjunath SulladTechnical ConsultantCommented:
Cross verify user ID is part of Group Policy Creator Owners group.

If you are facing this issue on particular DC / Server, try deleting the profile from computer properties, advanced systems settings, user profiles,

After deleting profile your profile will load freshly and try.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now