Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 51
  • Last Modified:

Unable to Delete GPO

Hi, I am trying to delete a GPO object and its sayis "Access is Denied". I have logged into the server as Administrator which is also a member of Domain Admins & Ent. Admins.

I have also checked the /%Sysroot%/SysVol/Policies and double confirmed the permissions are correct

Anyone have ideas on why i am unable to delete it?
0
Satheesh Agatheeswaran
Asked:
Satheesh Agatheeswaran
1 Solution
 
SvenIACommented:
You can use ADSIEdit or dsacls to reset the permission of the GPO to the
default permission of the group policy class.

Group Polices are stored within Active Directory in the follow container.
CN=Policies,CN=System,DC=<domain>,DC=<xxx>
0
 
Jeremy TyreCommented:
What version of server?  Depending on the version there is a way to turn off the protect on the GPO object that will cause this.
0
 
Satheesh AgatheeswaranAuthor Commented:
@Jeremy Tyre: - Its Windows 2008 R2

@SvenIA: - My Manager doesn't want to restore to default permissions
0
 
Satheesh AgatheeswaranAuthor Commented:
Thank you all, restoring the permissions to its defaults worked.. Took bit of time to get the approval :)
0
 
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now