Re: New Group Policy Using Windows 2000 Snap-in

From: Glenn L (the.only_at_gmail.com)
Date: 10/19/04 

Date: Tue, 19 Oct 2004 10:51:55 -0700

Just open the .reg file into notepad and cut and paste the contents. 

-- 
Glenn L
CCNA, MCSE 2000, MCSE 2003 + Security
"LoriP" <LoriP@discussions.microsoft.com> wrote in message
news:86923B21-D381-430F-A843-4FD94A0687DC@microsoft.com...
> Yes, I can create and edit GPOs from the PDC.  I have mixed results when
> creating and editing from others.  When I created an edited from an
upgraded
> domain controller, at one point I received this error message when opening
> Group Policy Management:  The Enterprise Domain Controllers group must
have
> read access on all GPOs in the domain in order for Group Policy Modeling
to
> function properly.  I can't even find that group to add it.  However, when
I
> tried to create and edit a GPO on this same domain controller I received
the
> same error message as in my original post.  On the PDC (which was upgraded
to
> W2K3) and a DC that was a fresh install I was able to create and edit a
GPO
> with no problem.
>
> Initially I was trying to create and edit the policy from a Windows 2000
> Workstation with Service Pack 4, and also from a W2K workstation with SP3.
>
> Below are the registry exports you requested.  The first two are from the
> workstation and the second two from the PDC.
>
> Well -- I did the export, but can't figure out how to paste them in here
> (sorry, I've not used this forum much).
>
> "Glenn L" wrote:
>
> > You can continue to administer GPO from W2K after you upgrade some or
all
> > DCs to W2K3.
> >
> > There are many reasons for this error.
> >
> > Can you create and edit GPOs from the PDC itself.
> > Can you create and edit GPOs from other W2K3 DCs?
> >
> > Does it only fail from a W2K system?
> > Is the W2K system a DC or a member server/workstation?
> >
> > I bet you are seeing a mismatch with SMB signing requirements.
> > export HKLM\system\CCS\services\lanmanserver\parameters &
> > lanmanworkstation\parameters from both the PDC and your W2K management
> > station.
> > Paste into this thread identifying which is which.
> > We can see from this if there is a mismatch in the signing requirements.
> >
> > -- 
> > Glenn L
> > CCNA, MCSE 2000, MCSE 2003 + Security
> >
> >
> > "LoriP" <LoriP@discussions.microsoft.com> wrote in message
> > news:07715E2D-6B95-4A52-A4A0-254A7D14CAA7@microsoft.com...
> > > Can you create and edit a new group policy using the Windows 2000
snap-in
> > > after upgrading your PDC and other domain controllers to Windows
Server
> > 2003,
> > > Standard Edition?  When I try this it lets me add a new one, but when
I
> > click
> > > Edit I get an error message:  Failed to open the Group Policy Object.
You
> > > may not have appropriate rights.  Details:  The system cannot find the
> > path
> > > specified.  It's looking for the file on the PDC, which is located in
a
> > > different site.  Prior to upgrading to 2003 the PDC was in the same
site I
> > am
> > > in.  I am a domain administrator.  Things appear to be working
correctly
> > > using the GPMC.  Any help would be appreciated.
> >
> >
> >

Relevant Pages

  • Re: New Group Policy Using Windows 2000 Snap-in
    ... I can create and edit GPOs from the PDC. ... >> domain controller, at one point I received this error message when opening ... >> read access on all GPOs in the domain in order for Group Policy Modeling ...
    (microsoft.public.win2000.active_directory)
  • Editing default Domain and DC GPO
    ... DC GPOs and edit them if the PDC is down? ... Domon's Profile: http://forums.techarena.in/members/48096.htm ...
    (microsoft.public.windows.server.active_directory)
  • RE: Editing default Domain and DC GPO
    ... Yep as you said thats posible, before doing that confirm that all FSMO Roles ... DC GPOs and edit them if the PDC is down? ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Group Policy Using Windows 2000 Snap-in
    ... Can you create and edit GPOs from the PDC itself. ... Prior to upgrading to 2003 the PDC was in the same site I ...
    (microsoft.public.win2000.active_directory)
  • RE: Group Policy Issues
    ... It does sound more and more like I'm going to have to blanket-wipe all GPOs ... > for the Default Domain Policy and the Default Domain Controllers Policy. ... >> Controller Policy' is fine, I can edit that one, but any others I cannot ... >> Even if I login as Administrator on a PDC, ...
    (microsoft.public.windows.server.active_directory)
Loading