That is weird. Might be time to do a sniffer trace. Also, check the system event log on each of the machines that is having a problem and make sure you're not getting any machine trust issues with the domain. Also, double-check that DNS client config on the two problem machines is correct. Could be a name resolution issue too.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, March 16, 2004 8:31 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy I have checked the security permissions, they appear to be correct (EA - Full Control). But, if permissions where the problem, then I would not be able to manage the domain from the Parent DC. It just does not work from my desk nor logging into the child DC. Could there be a communication problem, operations master, etc.??... I guessing here.. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Monday, March 15, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy Enterprise Admin should be able to do this. You might want to double check the permissions on the GPO in the child domain you're trying to edit. Make sure EAs really do have write perms on that GPO. You should be able to view and change GPO perms by either looking at the Properties on the GPO in the GPO editor (or dsa.msc) or by using the GPMC, which has a nicer interface into GPO perms. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Monday, March 15, 2004 12:29 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Unable to modify GPO Policy Okay, here is an interesting one. I am an enterprise admin trying to modify a child domains domain policy. If I open up an mmc console on the parents DC, I have no problem. If I open the mmc on either my desktop or on the child's DC, it says that I do not have permission. Why does one way work, but not the other? And what permissions do I have to change to have it work? Thanks, S List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
