Re: RSOP Access denied at 1 of 5 DC's

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

First check the logs using Event Viewer to see if any general problems are
reported for dns, replication, etc and then run the support tools netdiag
and dcdiag on that domain controller to check for general health of network
connectivity and domain membership. I would also check to see if the Windows
Firewall is enabled on the problem domain controller. If it is try disabling
it temporarily to see if that makes a difference. If it does leave it
disabled or configure it to allow the necessary IP addresses, ports,
protocols, or applications. By default when you run RSOP on a server it
will try to contact the PDC fsmo so make sure it can be reached by verifying
connectivity by pinging it by name and IP address and verify that you can
access an administrative share such as C$ on the PDC fsmo. -- Steve


"hansi-os" <hansi-os@xxxxxxxxxxxxxxxx> wrote in message
news:DD5ED777-5A00-4CE2-B08E-E59FE2177FC4@xxxxxxxxxxxxxxxx
>I need help with a problem in an W2K3 domain. I have 5 DC's at 4 Sites, all
> W2K3 Server.
> Last weekend I made a new installation of on of these DC's, because the
> inplace Upgrade from W2k to W2K3 failed. I removed the "old" W2K-DC by
> using
> ntdsutil / metadata cleanup. After rejoinig the W2K3 Server to the domain
> as
> DC by using DCPROMO everything seems to work fine.
>
> The only thing that is wrong is if I try to run an RSOP at the GPMC
> against
> this DC from any other PC or Server in the network I get the Message
> "Access
> denied". On every other DC it works very fine. If I run this local at the
> DC
> it works, but if I try to run it against any other DC I get the same
> Message.
> All DC's are in the same OU "Domain Controllers" and of couse the
> Permissions
> to plan and view RSOP are given. Can anybody help me?
>
> I am from Germany so please sorry for my Englisch.
>
> Hans


.

Relevant Pages

  • Re: GPO Password length not working
    ... The errors running RSOP in logging mode on the XP Pro computers could be ... Configure some settings for both user and computer ... You mention that you are using Group Policy filtering by using groups other ... >> domain container and that the default domain controller Group Policy is ...
    (microsoft.public.windows.server.security)
  • Re: GPO Password length not working
    ... my contact there about it and so we went into the RSoP and looked at their ... 'GPO-Applied' rather than Authenticated Users because some of the policies I ... Apply this policy rights. ... > linked to the domain controller container and that your domain controllers ...
    (microsoft.public.windows.server.security)
  • Re: Newbie policy & security groups ?: SBS/Win 2003 AD
    ... a few minutes for RSOP to complete. ... Another potential problem is if your domain controller or domain clients are ... must point to itself as it's preferred dns server and the domain computers ...
    (microsoft.public.win2000.security)
  • Re: Security Setting not showing in RSOP on DC
    ... One of them has all of the Default Domain Policy Security settings ... Defined through RSoP. ... When you use the RSoP snap-in on a Windows Server 2003 domain controller, some security policies are reported as Not Defined even though they are. ... This behavior occurs if the domain controller is not the PDC emulator and you use the RSoP snap-in or the GPMC, ...
    (microsoft.public.windows.group_policy)
  • Re: Going from 2000 SBS domain to w2k3 server domain
    ... > We have SBS 2000 and W2k3 server. ... We are not using Exchange, SQL or ISa on SBS 2000, it is used only ... Add new w2k3 srever into domain and promote it to domain controller ... > Is my thinking correct? ...
    (microsoft.public.backoffice.smallbiz2000)