Why would Group Policy Management in Windows Server 2008 lock out Domain and Enterprise Admins

Posted on 2014-08-18
Last Modified: 2014-08-19

When attempting to manage the Default Group policy, all of my domain admin accounts and enterprise admin accounts' privileges went to custom, and locked me out of being able to edit my GPO.  It says I lost permissions, and cannot make changes.

How do I recover?
Question by:Evan Cutler
    LVL 14

    Assisted Solution

    by:Brad Groux
    Are you trying to edit the GPO directly from a Domain Controller using GPMC?

    If so, it sounds like you may have some replication issues to clear up.

    Verify in domain\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9} the two adm folders probably have a FolderName_NTFRS_<xxxxxxxx> appended on them.

    Rename FRS directories.

    Reinitialize replication with BurFlags.
    LVL 77

    Accepted Solution

    did you perchance move those items into the protected groups OU?
    LVL 9

    Author Closing Comment

    by:Evan Cutler
    Thank you guys.
    David, your solution was it.  The GPMC Default Groups got stuck under a delegate OU that tried to take over the network.

    Appreciate the idea Brad...if anything happens again, I'll remember what you said. This time it was not the case.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
    As a long-time IT Professional, the most important skill I have developed and consider to be my most valuable tool is Effective Troubleshooting. Step through my problem-solving procedure in this 10-step guide adapted from The Universal Troubleshooti…
    This tutorial will give a short introduction and overview of Backup Exec 2014 and the additional features that have been added over its predecessor Backup Exec 2012. As with Backup Exec 2012, the Backup Exec button in the upper left corner. From her…
    This tutorial will walk an individual through the process of upgrading their existing Backup Exec 2012 to 2014. Either install the CD\DVD into the drive and let it auto-start, or browse to the drive and double-click the Browser file: Select the ap…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now