RE: Access Denied when running RSoP
- From: v-branee@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]")
- Date: Tue, 03 Jan 2006 03:38:59 GMT
Dear Customer,
Thank you for posting to the SBS Newsgroup.
I understand that when you trying to run the Group Policy Results Wizard,
you got "Access Denied" error message. If I have misunderstood your issue,
please let me know.
>From the error message, we know this is a permission issue. Please take
your time to read through my suggestions:
1. Please refer the steps in KB article below to verify the permission for
RSOP.
325353 HOW TO: Set WMI Namespace Security in Windows Server 2003
http://support.microsoft.com/?id=325353
2. Go to following keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winmgmt
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wmi
Grant the Local Service and Network Service with Full control to these keys.
3. Open the Domain Controller Policy and the Local Policy by GPEDIT.MSC, go
to Computer Configuration -> Windows Settings -> Security Settings -> Local
Policies -> User Rights Assignment\Impersonate a client after
Authentication, add following groups:
Local SERVICE
Local Administrator
IIS_WPG
Network Service
Restart computer to see if the issue is resolved.
============
If the issue persists, please help to gather following information for
further research:
a. If you use another domain user account, will this issue occur?
b. In the Group Policy Results Wizard, if you select another computer, will
this issue occur?
c. When did the issue occur? Did it work correctly before? Did you install
any software, like anti-virus or firewall recently?
d. What is the full content of the error message "Access Denied"? Please
type the full error message word by word to the Newsgroup.
Please take your time to perform the steps and gather the information if
the issue persists. I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Access Denied when running RSoP
>thread-index: AcYPhxHR8MSg6NY+SBaSH6rTFAKmPw==
>X-WBNR-Posting-Host: 83.117.209.47
>From: "=?Utf-8?B?QWQgdmFuIGRlbiBCcm9law==?=" <Ad van den
Broek@xxxxxxxxxxxxxxxxxxxxxxxxx>
>Subject: Access Denied when running RSoP
>Date: Mon, 2 Jan 2006 02:27:02 -0800
>Lines: 9
>Message-ID: <3ACD6B4A-7ECF-4F08-8973-AA0F3BEA457A@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:233479
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>When I try to run the GP Results Wizzard on our SBS2003 server and enter
one
>of the domain computer names, the wizzard always returns "Access Denied".
>When running the gpresult.exe tool from the DC on that workstation, it
asks
>for the password for the account <domain>\<administrator>, When I enter
this
>pwd it also return "Access Denied". The wizzard runs fine when I do not
enter
>another PC in it but let it run for the DC itself. There are no userenv
>errors in the logs. SBS2003 with all the latest SP's and updates, WinXP
SP2,
>firewalling off. We get the same result running the wizzard to a W2003
>Terminal Server in the same domain.
>
.
- Follow-Ups:
- RE: Access Denied when running RSoP
- From: Ad van den Broek
- RE: Access Denied when running RSoP
- Prev by Date: RE: Email to twmi.rr.com Undeliverable
- Next by Date: RE: ICW Error 0x80072030 returned from call to CEMailCommit::Commit().
- Previous by thread: RE: OWA Authentication
- Next by thread: RE: Access Denied when running RSoP
- Index(es):
Relevant Pages
|
Loading
