GPO Access denied

Posted on 2014-07-11
Medium Priority
Last Modified: 2014-07-18
trying to create or modify a GPO to give all users trusted website in IE. When I try to edit, I get a permissions not allowing me to change. But I am logged in as Domain ADmin. How do I circumvent this?
Question by:raffie613
  • 4
  • 2
LVL 38

Expert Comment

ID: 40191151
If you have added your ID to domain ID after you logged in, you have to log off and log back on again

Expert Comment

ID: 40191152
If you have UAC enabled, right click GPedit.msc link and select Run as Administrator.

Author Comment

ID: 40191438
I ran as administrator and still getting message that reads "some settings are managed by your administrator" on the bottom of the properties box.

Mahesh, not sure what you mean by my ID to Domain ID. I am logged into the server as the administrator, always have been.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

LVL 38

Expert Comment

ID: 40192281
Sorry, I mean domain admins

Are you logged on to domain controller or any management workstation ?
If its management workstation, In that case
you should be logged on as domain\administrator
Replace domain with NetBIOS name with your domain NetBIOS name

If you just type administrator for logon, you will be logged on to management workstation with local administrator of that workstation and then the behaviour you seen is expected

Author Comment

ID: 40192568
I am on the SBS server itself trying to edit/add a policy for Trusted sites into Internet explorer security. That is where is has the message at the bottom saying only administrators can make changes.

Accepted Solution

raffie613 earned 0 total points
ID: 40193274
ok, looks like i was looking in the wrong place to enter in the sites i want.
I found the correct place to enter the site i need.

Windows Components/Internet Explorer/Internet Control Panel/Security Pageshow

Is there anywhere else I need to add the new site I need in the trusted sites zone?


Author Closing Comment

ID: 40204104
It was the correct one. no one else gave it.

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question