RE: GPO Error



Hello Robert,

Thank you for posting to the SBS Newsgroup.

Thanks for Steve's input!

I understand that every time when you open GPMC, you will be prompted to an
error message. If I have misunderstood your issue, please let me know.

Please see my suggestion below:

The GPMC tool is designed to work with Windows Server 2003 domain. Due to
the differences, it might have some problems when managing Windows 2000
based domains.

Regarding the warning messages you get, it seems to be a known issue with
different inheritance settings in Windows 2000 domain. You can safely
ignore it, or use the following workaround:

1. Open Active Directory Users and Computers. Click the View menu and put a
check beside "Enable Advanced features".

2. Expand the System Branch.

3. Expand Policies.

4. Expand the GPC that has generated the error on GPMC, right-click Machine
(or User) and click Properties. Click the Security tab.

5. Clear the check beside "allow inheritable permissions from parent to
propagate to this object". Click OK. When presented with another message
box to Copy Remove the permissions - selected copy.

6. Test the issue again.

If the issue persists, please help to gather some information:

a) As Steve said, did you click OK or Cancel? Please try both and see
what will happen.

b) Run "eventvwr", check whether there is any error; if yes, double click
it and click the Copy button, paste the full information to the Newsgroup.

c) Enabled GPMC logging by adding the following registry keys and then
reproduce this problem again.

Key: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value: GPMgmtTraceLevel
Value Type: REG_DWORD
Value Data: 2

Key: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value: GPMgmtLogFileOnly
Value Type: REG_DWORD
Value Data: 1

This creates a gpmgmt.log that is located in the %temp% folder. The temp
folder in the profile of the currently logged on user.

If the file size is too large to paste to the Newsgroup, you can either
compress it as .zip file or separately to copy to the Newsgroup.

d) Does your server work well except this issue?

I am appreciated your time. If anything is unclear, please let me know. I
am looking forward to hearing from you!.

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.