Unable to save GPO edits in Windows 2003 Small Bussiness Server R2

Hello,

The machine is a Windows 2003 Small Business Server R2 SP1. I am having a
problem saving edits to a new GPO. I have tried to edit the new policy to
push out workstation settings with no avail.

Once the GPO is created I can only rename it, link it, enable\disable it. I
cannot edit it, or delete it once it has been created.

Here is the popup I receive when I try to delete the GPO:
Group Policy Management "The server is unwilling to process the request"

Here is the popup I receive when I try to save a edit to the GPO:
Administrative Templates "The Group Policy snapin was unable to save
your changes due to the following error: Logon failure: unknown username or
bad password."

Or I receive:

An extended error has occurred.
Failed to save
\\<Real Domain Name>.local\SysVol\<Real
DomainName>.Local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\Machine\Microsoft\WindowsNT\SecEdit\GptTmpl.inf.

These are the application logs for the events:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot access the file gpt.ini for GPO
CN={27E14316-C9ED-45E8-867E-860B1AC0733F},CN=Policies,CN=System,DC=<Real
Domain Name>,DC=local. The file must be present at the location <\\<Real
Domain Name>.local\SysVol\<Real Domain
Name>.local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\gpt.ini>. (Logon
failure: unknown user name or bad password. ). Group Policy processing
aborted.

I ran Netdiag and dcdiag with no failed tests, the system is functioning
normaly and is very responsive. All services are running that are
auto-started. Resources are great, and clients are able to logon use exchange
and shares without issue.

I am logged in as the administrator and have checked the effective
permissions on the windows\security folder as well as the SysVol folders
where the gpt.ini files reside. I have also logged in as a second user with
admin rights with the same results.

What has got me stumped is that I can rename the GPO but not delete it. This
issue is not isolated to just the first new GPO it is also occurning in the
second new GPO I created.

The strange thing is that if I use the Server Management Snap-In to change
setting the setting are saved to the approperate GPO's (Password Policies, My
Doc Redirect, ect.) So the system has full access just not the admin group.

Could this be a bad template file?

Does any one have any ideas……Thanks in advance
.

Relevant Pages

  • Re: Set GPO for specific user group
    ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Question
    ... Group Policy Processing ... As described earlier in this paper, Group Policy is processed in the ... Local Group Policy Object, ... Any domain-based GPO may be enforced by using the Enforce ...
    (microsoft.public.win2000.group_policy)
  • Re: group policy preferences
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: ShockwaveTest ... GPO: Default Domain Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Downloading unchanged GPOs
    ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... On analysis we understand that if a CSE has multiple GPO's then even if one of the GPO changes, all the GPO's belonging to that CSE gets read. ... words, they are not held in some separate place on the client), then yes, all settings from all 3 GPOs would be read by the client if just one GPO changes. ...
    (microsoft.public.win2000.group_policy)
  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... I am able to create GPO's on my test server and edit them as ... to delete the GPO at the very least. ... Group Policy Management "The server is unwilling to process the request" ...
    (microsoft.public.windows.server.sbs)