RE: Access denied creating GPO

Tech-Archive recommends: Speed Up your PC by fixing your registry

I'm sorry i have verified all the items you write below, but i still have the
error "access denied".

I made a teste with the same user "administrator" and i create a directory
\\srv01\sysvol\{domainname}\polices\test and i have no errors so i think the
problem is not in the sysvol

In the GPMC-> Group Policy Objects->Delegation i have the following groups:
Domain Admins
Group Policy Creator Owners
System



Thanks for your time

Regards
Sérgio Lavos


"Steven Zhu [MSFT]" wrote:

Hi,

Thanks for the new information.

Based on my research, I find some similar issue on my internal site. This
issue may cause by the permissions for the SYSVOL share were incorrect.

Please added Administrators and gave them Full Control permission at the
share. This allowed you to create new GPOs and edit existing ones.
The default permissions to the SYSVOL share are:

- Administrators: Full Control
- Authenticated Users: Full Control
- Everyone: Read

You may wish to check share permissions on both domain controllers and
return them to their default settings.

Also, please check the permission for the SYSVOL NTFS security:

- Administrators: Full Control
- Authenticated Users: Read & Execute
- Create Owner: Specific permission
- Server Operator: Read & Execute
- System: Full Control

I hope the above information helps.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================








.

Relevant Pages

  • RE: NTFS permissons on SystemRoot and below...
    ... permissions on my sysvol share to the default permissions for this folder it ... Adminstrators = Full Control ... Any thoughts on how to permanently address this issue on the sysvol share ... someone mistakenly created a GPO that sets NTFS ...
    (microsoft.public.windows.file_system)
  • RE: Access denied creating GPO
    ... issue may cause by the permissions for the SYSVOL share were incorrect. ... Administrators: Full Control ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: Help with GPO problem! PLEASE!!
    ... Administrators FULL CONTROL ... Authenticated Users FULL CONTROL ... Share name: SYSVOL ... > authenticated users and everyone with read permissions and no deny ...
    (microsoft.public.windows.group_policy)
  • NTFS permissons on SystemRoot and below...
    ... someone mistakenly created a GPO that sets NTFS ... replacing permissions below and enabling inheritance. ... Administrators = Full Control ... SYSVOL folders are inconsistent with those in AD, ...
    (microsoft.public.windows.file_system)
  • Re: Active Directory domain policy not available - Windows cannot access the registry information (5
    ... shuffling the registry around as a result. ... >What share permissions did you change? ... >SYSVOL and NETLOGON shares aren't accessible. ... >the domain controller is changed but the DNS still points to the old IP ...
    (microsoft.public.backoffice.smallbiz2000)