Unable to delete GPO-Best way to correct this?

Indie101
Indie101 used Ask the Experts™
on
Was creating a test group policy but changed permissions and took domain admin, enterprise admin off it etc

Now its telling me that the specified directory service attribute or value does not exist

Any best way to correct this, it won't let me delete the GPO
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Abhi PappiTechnical Lead - Network Support

Commented:
Hi,

Have you tried to add the permissions back on the gpo? Click on any working GPO, then select the "Delegation" tab, then "Advanced" to compare the group membership. Add the same group on your testGPO and then delete it.

Thanks,
Abhi...

Author

Commented:
Tried that won't let me them add them back on test GPO, thanks
Technical Lead - Network Support
Commented:
Hi,

I tried it on my network. Created a test GPO, removed all security groups from delegation. It made a red cross on the GPO showing its "Inaccessible". However I was still able to delete it, as I was logged in the DC as a domain admin user.

Can you check the "Delegation\Advanced" to if there any groups have "Deny" permission to any group?

Also, can you select the problem GPO--> Click on the  "Details" tab, then note down the "Unique ID". Browse and search on the sysvol folder (C:\Windows\Sysvol\Domain\Policies)  and check if there is a DENY permission in the GUID folder or the GPT file inside it.

Havent asked you earlier, how many Dcs are there in your network? Are you facing any sysvol replication issues?

Thanks,
Abhi...

Author

Commented:
Thanks for the detail, yeah 4 DCs here no sysvol replication issues will investigate that and get back to you
Shaun VermaakTechnical Specialist
Awarded 2017
Distinguished Expert 2018

Commented:
Was creating a test group policy but changed permissions and took domain admin, enterprise admin off it etc
Just add the permission back directly on the GPO object and the SYSVOL folder. DA have take owner rights

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial