Enterprise Admin should be able to do this. You might want to double check the permissions on the GPO in the child domain you're trying to edit. Make sure EAs really do have write perms on that GPO. You should be able to view and change GPO perms by either looking at the Properties on the GPO in the GPO editor (or dsa.msc) or by using the GPMC, which has a nicer interface into GPO perms.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Monday, March 15, 2004 12:29 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Unable to modify GPO Policy Okay, here is an interesting one. I am an enterprise admin trying to modify a child domains domain policy. If I open up an mmc console on the parents DC, I have no problem. If I open the mmc on either my desktop or on the child's DC, it says that I do not have permission. Why does one way work, but not the other? And what permissions do I have to change to have it work? Thanks, S List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
