Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cannot create or Edit GPO, Access Denied!

Status
Not open for further replies.

vannhonguoiyeu

IS-IT--Management
Aug 21, 2008
10
VN
I have the Administrator account of my domain, when I use Active Directory and user to create a new GPO, it say "Access Denied!".

can anyone help me!!

Thanks a lot!
 
Is this a single domain single site?
Security maybe set at a higher level in the structure.
Check the security Tab of the OU.
 
If you have the Admin acct for the Domain then it should have rights to the gpos by default because if you look in the delegation tab (using gpmc) you'll see domain admins and the admin acct is part of that group.

Unless someone messed with the gpo default permissions which isn't a good idea.
 
@Grimm:
Yes, this is the Single site, but I have another Server to be an additional Domain Controller, does it make a change?

@Rockstar101
when i lookin this tab, I show only 4 (Administrator group, Domain Admins group, Enterprise Admi group and System group) does it enought, do I need to add the Administrator account to this delegation?
 
Thanks for the solution. That's a strange one I'm running ePO 4.0 and the only thing it blocks is port 25, which I cant find how to turn off on Exchange. Stupid new interface, I preferred ePO 3.5
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top