Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Unable to edit Security Setrtings in GPO

Status
Not open for further replies.

spazman

Programmer
May 29, 2001
500
CA
Okay, I have a domain. 3 DC's. Too many but hear me out.

Oringally a TS was put up with AD in it. Problems arose. So we put a second server is for AD. AD was not removed the TS, becasue problems were still happening. So we VM converted the TS and brought the hardware back for diagnostics. What we ended up doing was conveting their old hardware with some RMA upgrades to a VM host, IBM x3400 32g ram 2 Xeon 1.86.

WE decided that sonce their other AD server was on loan form us we would put a AD server and the TS on the VM. We took them to the cloient site added them to the domain, and made one a DC.

Now since the TS is not on AD server and not a DC, I need to change the GPO because the Default Domain Comtroller policy was used to set up TS setting (I KNOW THIS IS NOT RECOMMENDED, I DID NOT DO THIS).

Now when I go into the Default Doamin Controller POlicy I can not see Account Policies, Local Policies, Event Log, Retricted Groups, System Services, REgisrty and File System sub sections in the GPO. I have changed the Domain Comtroller in the GPMC to the current one, I have verified the ize the og the GPO object at both "sites" and they are the same. I am pretty sure, this is happnding because there is no PDC emulator locally.

Any ides how I can fix this? I just need to be able to change the GPOs do that when they are connected again they will sync. Or am I going to scress things up?
 
P.S. If I create a nrew GPO I can see the settings.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top