Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve

No but there's no "edit" box is what I'm saying.

What's the event viewer say? Got issues/clues there?

Databit54 wrote:
I have rebooted. I am able to create GPO's on my test server and edit them as well as delete them. The test server is the same OS as the server I am having issues with. So, I am not sure why it would act different. I should be able to delete the GPO at the very least. are you saying that I should not create custom GPO's for things like scripts and mandatory settings (Wallpaper, Screensavers, ect)?

"Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:

You can't edit GPOs in the GPMC...you should however be able to delete it. I'm assuming you've rebooted?



Databit54 wrote:
Hello,

The machine is a Windows 2003 Small Business Server R2 SP1. I am having a problem saving edits to a new GPO. I have tried to edit the new policy to push out workstation settings with no avail.

Once the GPO is created I can only rename it, link it, enable\disable it. I cannot edit it, or delete it once it has been created.

Here is the popup I receive when I try to delete the GPO:
Group Policy Management "The server is unwilling to process the request"

Here is the popup I receive when I try to save a edit to the GPO:
Administrative Templates "The Group Policy snapin was unable to save your changes due to the following error: Logon failure: unknown username or bad password."

Or I receive:

An extended error has occurred.
Failed to save
\\<Real Domain Name>.local\SysVol\<Real DomainName>.Local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\Machine\Microsoft\WindowsNT\SecEdit\GptTmpl.inf.

These are the application logs for the events:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 2/14/2007
Time: 6:59:02 PM
User: <Real Domain Name>\administrator
Computer: <Real Server Name>
Description:
Windows cannot access the file gpt.ini for GPO CN={27E14316-C9ED-45E8-867E-860B1AC0733F},CN=Policies,CN=System,DC=<Real Domain Name>,DC=local. The file must be present at the location <\\<Real Domain Name>.local\SysVol\<Real Domain Name>.local\Policies\{27E14316-C9ED-45E8-867E-860B1AC0733F}\gpt.ini>. (Logon failure: unknown user name or bad password. ). Group Policy processing aborted.

I ran Netdiag and dcdiag with no failed tests, the system is functioning normaly and is very responsive. All services are running that are auto-started. Resources are great, and clients are able to logon use exchange and shares without issue.

I am logged in as the administrator and have checked the effective permissions on the windows\security folder as well as the SysVol folders where the gpt.ini files reside. I have also logged in as a second user with admin rights with the same results.

What has got me stumped is that I can rename the GPO but not delete it. This issue is not isolated to just the first new GPO it is also occurning in the second new GPO I created.

The strange thing is that if I use the Server Management Snap-In to change setting the setting are saved to the approperate GPO's (Password Policies, My Doc Redirect, ect.) So the system has full access just not the admin group.

Could this be a bad template file?

Does any one have any ideas……Thanks in advance
.

Relevant Pages

  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... GPO security settings from the defauts. ... Restart the workstation computer and the Terminal server, ... I've chosen these settings only because the affect is easy to observe. ... add check mark in the Deny column for Apply Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: User Profiles
    ... Windows Server 2003. ... effects of another GPO, ... the shared folder - enabled various other settings - enabled GPO ... 231287 - Loopback Processing of Group Policy ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO delivered User rights for unique local account.
    ... You do not need to install adminpak to alter GPO settings, ... If you were to use gpedit (as from an adminpak install) on a XP Pro at SP2 ... For server A you now need LocalAccountA1 in a certain user right. ... local group policy or if one used uniformly named machine local ...
    (microsoft.public.win2000.security)
  • Re: Group Policy to control custom server application
    ... You'll be hard-pressed to do this via GPO. ... There is no remote notification mechanism in Group Policy that you can rely on. ... I don't see how you can let the server app know that the client has logged on without some kind of event-based notification communication between client and server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... I am able to create GPO's on my test server and edit them as ... to delete the GPO at the very least. ... Group Policy Management "The server is unwilling to process the request" ...
    (microsoft.public.windows.server.sbs)