Group Policy and Domain Type Problem

Hi everybody,

We're having a problem on our Active Directory, we can not edit GPOs which
have been defined previously including Default Domain Policy and Default
Domain Controllers Policy as well. When we try to edit it, it says;

"Failed to open the group policy object. You may not have appropriate rights."
Detail:
"The system can not find the path specified."

Then, we try to change the security settings of related GPO , we remove some
and add another, finally when we try to Apply or click Ok, then it says;

"Unable to save permission changes on {....-.....-......-......}"
"The system can not find the file specified."

We can create new GPOs and edit them successfully, there is nothing wrong
with the new created ones.

We're using administrator account to try all of them above..

Thanks in advance..

Baki
Mon Jun 16 11:05:09 PDT 2008


By the way, we're using Windows 2003 R2 x64 Enterprise Server.

Another point is, that when we run gpresult.exe on the domain controller,

then it says that, the computer settings domain type windowsNT 4, but user
settings domain type shows windows2000..




"Baki" wrote:

> Hi everybody,
>
> We're having a problem on our Active Directory, we can not edit GPOs which
> have been defined previously including Default Domain Policy and Default
> Domain Controllers Policy as well. When we try to edit it, it says;
>
> "Failed to open the group policy object. You may not have appropriate rights."
> Detail:
> "The system can not find the path specified."
>
> Then, we try to change the security settings of related GPO , we remove some
> and add another, finally when we try to Apply or click Ok, then it says;
>
> "Unable to save permission changes on {....-.....-......-......}"
> "The system can not find the file specified."
>
> We can create new GPOs and edit them successfully, there is nothing wrong
> with the new created ones.
>
> We're using administrator account to try all of them above..
>
> Thanks in advance..
>
>

Meinolf
Mon Jun 16 14:15:31 PDT 2008

Hello Baki,

Did you change something before or was there a crash/reinstall/recovery?
Additional run dcdiag, netdiag and repadmin /showreps to check for errors.
If you have some post a complete output here.

Also see here:
http://support.microsoft.com/kb/832214

http://support.microsoft.com/kb/253268

http://support.microsoft.com/default.aspx/kb/294257

http://support.microsoft.com/kb/839499

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi everybody,
>
> We're having a problem on our Active Directory, we can not edit GPOs
> which have been defined previously including Default Domain Policy and
> Default Domain Controllers Policy as well. When we try to edit it, it
> says;
>
> "Failed to open the group policy object. You may not have appropriate
> rights."
> Detail:
> "The system can not find the path specified."
> Then, we try to change the security settings of related GPO , we
> remove some and add another, finally when we try to Apply or click Ok,
> then it says;
>
> "Unable to save permission changes on {....-.....-......-......}" "The
> system can not find the file specified."
>
> We can create new GPOs and edit them successfully, there is nothing
> wrong with the new created ones.
>
> We're using administrator account to try all of them above..
>
> Thanks in advance..
>