Check your security permissions on the GPO or if you have security groups, check you
permissions on that and see if anything has changed there. You may need to add and
remove the individual or group to correct the scenario.
That fails you might try the Domain Administrator and have them clear up the
permissions by giving whoever the owner is full control again.
Worst scenario is to delete the GPO and start over but document what you have first.
We created an Excel spreadsheet listing all the GPOs and it shows what has been
enabled and comments regarding why it was set, etc.
good luck
-----Original Message-----
From: Hutchings, Darren (3159) [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 11:10 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Group Policy and MMC
Hi there.
I'm having a bit of a problem with Group Policy and the MMC. Someone in our
org. changed a permission within Active Directory that restricts access to
the SQL Administrator snap-in for MMC (or possibly access to the MMC
itself). He's not sure exactly what he changed, and cannot seem to track
down the change he made that restricts this.
Does anyone have any clue where to look? I've scoured the domain default
GPO's, all of the GPOs in each of our OU's with absolutely no luck. There
must be something that I'm missing. When one of the users who previously
had access to administer her SQL server attempts to do so, she gets an error
indicating that access has been restricted by group policy.
Thank you very much in advance,
Darren Hutchings
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
