Re: GPO error no appropriate rights

Download details: Update for Windows Server 2003 (KB842933):
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=532A4CD0-F2CE-4FA7-92AB-AC336AD18409&displaylang=en


This patch? That's a 2k3 patch...not sure why you are having an issue with it?

Review the group memberships of the built in administrator account...what group memberships do you have?

Are you logged into the server?  You can just 'unenable' the gpo link.

Well one way you can block that is make them restricted uses on the local machine. Maybe I have stupid users, but they never disable the ISA client. They don't even notice it's there. I'm guessing that you can acl the ISA client or something but I'd have to google to see if I can find something. You might want to check with the gang on isaserver.org

Dan Shallbetter wrote: 
The exact error is:

Failed to open group policy object. You may not have appropriate rights. 

Details:  The Parameter is invalid

This error occurs when I try to edit a GPO while logged on as the system admin.

When I try to install that update on Saturday. And got a wrong OS warning, it appeared the patch was for server 2000.

E-Trust (Computer Associates) is my anti-virus software. I think the only thing blocking it is the SP2 firewall. On my SBS 4.5 server I had to disable the firewall before I could remote install the client app. I would like to disable the XP SP2 firewall just long enough to install the client software.

I would like to prevent users from turning off the ISA clients, How do I do this using GPO?

I am running a Progress Database ERP application on my SBS server. They have strongly advised turning off the firewall in XP SP2 (as in we will not support you if you run SP2). My initial testing (4 days) indicates that the application runs with both the ISA client and SP2 firewall running. 

"Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:


Can you give the exact error?  I don't think it's rights
Download details: Update for Windows Server 2003 (KB842933):
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=532A4CD0-F2CE-4FA7-92AB-AC336AD18409&displaylang=en


I would just all the Etrust exclusions in the group policy and leave on the XP sp2 firewall.. you want to make your workstations PART of your security stance. Leave them on... you need it in place for layers of defenses

Dan Shallbetter wrote:

I am trying to install E-trust Inoculate on my XP SP2 machines. I need to disable the XP firewall & Microsoft Anti Virus. I installed patch 87269 on my SBS2003 server and did an auto updated on the XP machine. I can not change the firewall status at the local machine, as it is controlled by domain policy. When I try to edit a GPO I get a group policy error message telling me I may not have appropriate rights. I am logged on as the admin. What is the best way to fix this problem? Also I would like to prevent users from disabling the ISA client, is this something I would do using a group policy?

Thanks

Dan


--
An open letter to the Security Community::
http://msmvps.com/bradley/archive/2004/12/12/23540.aspx


--
An open letter to the Security Community::
http://msmvps.com/bradley/archive/2004/12/12/23540.aspx
.

Relevant Pages

  • anti Windows XP SP2 firewall trick
    ... This trick use only modification of registry keys.Windows Xp SP2 firewall have ... to it,your server can run freely. ... It will become invisible from this list because after you create socket,you can remove registry string value of your server and connection wont be aborted ... Tested on Windows XP 2005 center media edition with integrated SP2 ...
    (Bugtraq)
  • Re: sloooowww response from server
    ... > Please post the ipconfig/all from the server and one from a client. ... > Microsoft SBS-MVP ... I may be totally offbase, and I mostly support Linux, but here goes! ... Try shutting off the SP2 Firewall and seeing if that makes any ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: sloooowww response from server
    ... Very bad advise to turn off the XP SP2 firewall. ... >> Please post the ipconfig/all from the server and one from a client. ... >> Microsoft SBS-MVP ... > I may be totally offbase, and I mostly support Linux, but here goes! ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP-Firewall und WS-FTP-Pro
    ... ich verwende Smartftp für das connecten auf meinen 1&1 Server und ... hatte trotz SP2 Firewall nie Probleme. ... Martin S. ...
    (microsoft.public.de.german.windowsxp.sonstiges)
  • RE: file sharing problem
    ... I cannot do anything with the sp2 firewall. ... saying that the service is not running and would I like to start it? ... > It doesen't matter if mcafee firewall is disabled or not ... >> It was enabled on both machines, but disabling it did not change the ...
    (microsoft.public.windowsxp.network_web)