AD GPO Container Objects

[WalleyeGuy]

Hiya All

I'm trying to clean up a whole bunch of problems left to me by my predecessor. After going through most of the containers in the Active Directory here (Native Win2K3 - one forest, domain and domain controller (for now)) I've cleaned up most of it and am now having problems with the policies container objects.

CN=Policies,CN=System,DC=domain,DC=local

Inside the policy container, there are two objects that come up as TYPE UNKNOWN (as opposed to groupPolicyContainer) and of course ADSIEDIT shows the class to be blank.

How in the world can I remove these? - I simply get "The specified directory service attribute or value does not exist" (error code 0x8007200a). domain\sysvol\domain\policies does not contain any references to these objects either.

 

[Rockstar101]

The unknown part of the GPO is the GP container:

You might have to first take ownership of the object by right-clicking on the Unknown GPC, selecting Properties, clicking on the Security Tab, selecting the Advanced button, and then clicking the Owner tab.

There are to parts to a GPO: the template and the container. the template is located in SysVol and the Container part is in AD. They both need to have the same security applied.

It is best practice configure security by using gpmc and not directly on the GPC or GPT. Good luck.

 

[WalleyeGuy]

That's some of the problem Rockstar...
There is nothing in SYSVOL, only in AD. I cannot see these objects with GPMC. Running group policy reports, I never see these two objects.

I'll try and see if taking ownership via ADUC will let me remove the items - let ya know

 

[WalleyeGuy]

Nope, no luck. Taking control of the bogus objects did not help either.

Below is the error I receive when I do try to delete it from either ADUC or ADSIEDIT (the only two places I see references to these objects).

 

[WalleyeGuy]

The error shot can be seen at

http://www.diamondlakeil.net/images/error.jpg

The attributes (or lack thereof) shot is at

http://diamondlakeil.net/images/attribute.jpg