Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve

I have rebooted. I am able to create GPO's on my test server and edit them as
well as delete them. The test server is the same OS as the server I am having
issues with. So, I am not sure why it would act different. I should be able
to delete the GPO at the very least. are you saying that I should not create
custom GPO's for things like scripts and mandatory settings (Wallpaper,
Screensavers, ect)?

"Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:

You can't edit GPOs in the GPMC...you should however be able to delete
it. I'm assuming you've rebooted?



Databit54 wrote:
Hello,

The machine is a Windows 2003 Small Business Server R2 SP1. I am having a
problem saving edits to a new GPO. I have tried to edit the new policy to
push out workstation settings with no avail.

Once the GPO is created I can only rename it, link it, enable\disable it. I
cannot edit it, or delete it once it has been created.

Here is the popup I receive when I try to delete the GPO:
Group Policy Management "The server is unwilling to process the request"

Here is the popup I receive when I try to save a edit to the GPO:
Administrative Templates "The Group Policy snapin was unable to save
your changes due to the following error: Logon failure: unknown username or
bad password."

Or I receive:

An extended error has occurred.
Failed to save
\\<Real Domain Name>.local\SysVol\<Real
DomainName>.Local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\Machine\Microsoft\WindowsNT\SecEdit\GptTmpl.inf.

These are the application logs for the events:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot access the file gpt.ini for GPO
CN={27E14316-C9ED-45E8-867E-860B1AC0733F},CN=Policies,CN=System,DC=<Real
Domain Name>,DC=local. The file must be present at the location <\\<Real
Domain Name>.local\SysVol\<Real Domain
Name>.local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\gpt.ini>. (Logon
failure: unknown user name or bad password. ). Group Policy processing
aborted.

I ran Netdiag and dcdiag with no failed tests, the system is functioning
normaly and is very responsive. All services are running that are
auto-started. Resources are great, and clients are able to logon use exchange
and shares without issue.

I am logged in as the administrator and have checked the effective
permissions on the windows\security folder as well as the SysVol folders
where the gpt.ini files reside. I have also logged in as a second user with
admin rights with the same results.

What has got me stumped is that I can rename the GPO but not delete it. This
issue is not isolated to just the first new GPO it is also occurning in the
second new GPO I created.

The strange thing is that if I use the Server Management Snap-In to change
setting the setting are saved to the approperate GPO's (Password Policies, My
Doc Redirect, ect.) So the system has full access just not the admin group.

Could this be a bad template file?

Does any one have any ideas……Thanks in advance

.

Relevant Pages

  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... GPO security settings from the defauts. ... Restart the workstation computer and the Terminal server, ... I've chosen these settings only because the affect is easy to observe. ... add check mark in the Deny column for Apply Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: User Profiles
    ... Windows Server 2003. ... effects of another GPO, ... the shared folder - enabled various other settings - enabled GPO ... 231287 - Loopback Processing of Group Policy ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO delivered User rights for unique local account.
    ... You do not need to install adminpak to alter GPO settings, ... If you were to use gpedit (as from an adminpak install) on a XP Pro at SP2 ... For server A you now need LocalAccountA1 in a certain user right. ... local group policy or if one used uniformly named machine local ...
    (microsoft.public.win2000.security)
  • Re: Group Policy to control custom server application
    ... You'll be hard-pressed to do this via GPO. ... There is no remote notification mechanism in Group Policy that you can rely on. ... I don't see how you can let the server app know that the client has logged on without some kind of event-based notification communication between client and server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... The test server is the same OS as the server I am having issues with. ... I should be able to delete the GPO at the very least. ... I have tried to edit the new policy to push out workstation settings with no avail. ... Administrative Templates "The Group Policy snapin was unable to save your changes due to the following error: Logon failure: unknown username or bad password." ...
    (microsoft.public.windows.server.sbs)