Re: GPO error no appropriate rights

I am on the server as the admin use. The account belongs to the following
groups:
Administrator
Domain User
Enterprise Administrator
Group Policy Creator owner
Internet Users
Mobile User
Schema Administrator

I will re-check the patch. My patch came from a tech-net article that I
thought was for 2003.

Thanks

Dan


"Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:

> Download details: Update for Windows Server 2003 (KB842933):
> http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=532A4CD0-F2CE-4FA7-92AB-AC336AD18409&displaylang=en
>
>
> This patch? That's a 2k3 patch...not sure why you are having an issue
> with it?
>
> Review the group memberships of the built in administrator
> account...what group memberships do you have?
>
> Are you logged into the server? You can just 'unenable' the gpo link.
>
> Well one way you can block that is make them restricted uses on the
> local machine. Maybe I have stupid users, but they never disable the
> ISA client. They don't even notice it's there. I'm guessing that you
> can acl the ISA client or something but I'd have to google to see if I
> can find something. You might want to check with the gang on isaserver.org
>
> Dan Shallbetter wrote:
> > The exact error is:
> >
> > Failed to open group policy object. You may not have appropriate rights.
> >
> > Details: The Parameter is invalid
> >
> > This error occurs when I try to edit a GPO while logged on as the system
> > admin.
> >
> > When I try to install that update on Saturday. And got a wrong OS warning,
> > it appeared the patch was for server 2000.
> >
> > E-Trust (Computer Associates) is my anti-virus software. I think the only
> > thing blocking it is the SP2 firewall. On my SBS 4.5 server I had to disable
> > the firewall before I could remote install the client app. I would like to
> > disable the XP SP2 firewall just long enough to install the client software.
> >
> > I would like to prevent users from turning off the ISA clients, How do I do
> > this using GPO?
> >
> > I am running a Progress Database ERP application on my SBS server. They
> > have strongly advised turning off the firewall in XP SP2 (as in we will not
> > support you if you run SP2). My initial testing (4 days) indicates that the
> > application runs with both the ISA client and SP2 firewall running.
> >
> > "Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:
> >
> >
> >>Can you give the exact error? I don't think it's rights
> >>Download details: Update for Windows Server 2003 (KB842933):
> >>http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=532A4CD0-F2CE-4FA7-92AB-AC336AD18409&displaylang=en
> >>
> >>
> >>I would just all the Etrust exclusions in the group policy and leave on
> >>the XP sp2 firewall.. you want to make your workstations PART of your
> >>security stance. Leave them on... you need it in place for layers of
> >>defenses
> >>
> >>Dan Shallbetter wrote:
> >>
> >>>I am trying to install E-trust Inoculate on my XP SP2 machines. I need to
> >>>disable the XP firewall & Microsoft Anti Virus. I installed patch 87269 on my
> >>>SBS2003 server and did an auto updated on the XP machine. I can not change
> >>>the firewall status at the local machine, as it is controlled by domain
> >>>policy. When I try to edit a GPO I get a group policy error message telling
> >>>me I may not have appropriate rights. I am logged on as the admin. What is
> >>>the best way to fix this problem? Also I would like to prevent users from
> >>>disabling the ISA client, is this something I would do using a group policy?
> >>>
> >>>Thanks
> >>>
> >>>Dan
> >>>
> >>
> >>--
> >>An open letter to the Security Community::
> >>http://msmvps.com/bradley/archive/2004/12/12/23540.aspx
> >>
>
> --
> An open letter to the Security Community::
> http://msmvps.com/bradley/archive/2004/12/12/23540.aspx
>
.

Relevant Pages

  • Re: How to launch program only for certain group>
    ... This particular TS server is not within an AD domain, ... I then designate this batch file run by using the Group Policy Editor on the ... Problem is, for an Administrator, ... BUT, it seems that (without GPMC), you can't customize these TS policies by ...
    (microsoft.public.windows.terminal_services)
  • Re: File share
    ... The installation failure could also be due to local of administrator powers ... Restriction Policies [less likely from your error message]. ... Resultant Set of Policy mmc snapin to see what Group Policy settings are ... > Hi, Id a recently added a new server to my small home networks, used Win ...
    (microsoft.public.windows.server.security)
  • Re: "You must be a member of the Administrators group on this computer
    ... computer in a network group of 6 computer wid one server. ... If you are not on a domain, the Group Policy will be on the local machine. ... Discuss this with your systems administrator since s/he is the one who set the policy. ...
    (microsoft.public.windowsxp.hardware)
  • Re: cant get user to excute on a logon script, administrator is o.k.
    ... > Windows Server MVP ... I am not educated with the likes and dislikes of Group Policy running ... Administrator only folder and delete the user file synchronously. ...
    (microsoft.public.win2000.group_policy)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... Security Templates in Windows Server 2003 - ... The Network Service account must be added to the policy settings in the ... This issue may occur if Group Policy settings that were applied at ... When you tried to launch the Remote assistance, ...
    (microsoft.public.windows.server.sbs)