Unable to delete GPO-Best way to correct this?

Was creating a test group policy but changed permissions and took domain admin, enterprise admin off it etc

Now its telling me that the specified directory service attribute or value does not exist

Any best way to correct this, it won't let me delete the GPO
LVL 1
Indie101Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Abhi PappiTechnical Lead - Network SupportCommented:
Hi,

Have you tried to add the permissions back on the gpo? Click on any working GPO, then select the "Delegation" tab, then "Advanced" to compare the group membership. Add the same group on your testGPO and then delete it.

Thanks,
Abhi...
Indie101Author Commented:
Tried that won't let me them add them back on test GPO, thanks
Abhi PappiTechnical Lead - Network SupportCommented:
Hi,

I tried it on my network. Created a test GPO, removed all security groups from delegation. It made a red cross on the GPO showing its "Inaccessible". However I was still able to delete it, as I was logged in the DC as a domain admin user.

Can you check the "Delegation\Advanced" to if there any groups have "Deny" permission to any group?

Also, can you select the problem GPO--> Click on the  "Details" tab, then note down the "Unique ID". Browse and search on the sysvol folder (C:\Windows\Sysvol\Domain\Policies)  and check if there is a DENY permission in the GUID folder or the GPT file inside it.

Havent asked you earlier, how many Dcs are there in your network? Are you facing any sysvol replication issues?

Thanks,
Abhi...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Indie101Author Commented:
Thanks for the detail, yeah 4 DCs here no sysvol replication issues will investigate that and get back to you
Shaun VermaakTechnical SpecialistCommented:
Was creating a test group policy but changed permissions and took domain admin, enterprise admin off it etc
Just add the permission back directly on the GPO object and the SYSVOL folder. DA have take owner rights
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
ACT

From novice to tech pro — start learning today.