Steve- The first error you sent about being unable to read GPT.ini indicates that SYSVOL is probably corrupted or at least inconsistent for your GPOs. Did you run gpotool.exe on your domains? I'm not sure what this error below means except it could just be more FRS issues. You might try using something like Windiff to compare the contents of the policies folder under SYSVOL between your PDC emulator (which is where GPO changes usually originate) and other DCs in your child domain. It sounds very much like an FRS issue.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, March 30, 2004 6:44 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy I just received a new error: Event Type: Error Event Source: SclgNtfy Event Category: None Event ID: 1002 Date: 3/30/2004 Time: 3:38:43 PM User: N/A Computer: PQA-DC Description: Default group policy object cannot be created. Error 80070005 to open GPO Domain EFS Recovery Policy in domain LDAP://DC=pqa,DC=corillian,DC=com. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Hope this helps. Thanks, Steve -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, March 30, 2004 3:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy I think Tim has a good idea here. Steve, have you tried running gpotool.exe? That will tell you if you have inconsistencies in GPOs between DCs in the domain. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines Sent: Tuesday, March 30, 2004 5:08 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Unable to modify GPO Policy What error do you receive? My guess is that there may be some inconsistencies in the gpo template folder permissions between the DCS. Do you get the same behavior if you connect the MMC to different DCs in the child domain? ----- Original Message ----- From: "Steve Shaff" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 30, 2004 4:46 PM Subject: RE: [ActiveDir] Unable to modify GPO Policy Anyone else have any other ideas? Thanks, S -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, March 16, 2004 8:31 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy I have checked the security permissions, they appear to be correct (EA - Full Control). But, if permissions where the problem, then I would not be able to manage the domain from the Parent DC. It just does not work from my desk nor logging into the child DC. Could there be a communication problem, operations master, etc.??... I guessing here.. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Monday, March 15, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Unable to modify GPO Policy Enterprise Admin should be able to do this. You might want to double check the permissions on the GPO in the child domain you're trying to edit. Make sure EAs really do have write perms on that GPO. You should be able to view and change GPO perms by either looking at the Properties on the GPO in the GPO editor (or dsa.msc) or by using the GPMC, which has a nicer interface into GPO perms. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Monday, March 15, 2004 12:29 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Unable to modify GPO Policy Okay, here is an interesting one. I am an enterprise admin trying to modify a child domains domain policy. If I open up an mmc console on the parents DC, I have no problem. If I open the mmc on either my desktop or on the child's DC, it says that I do not have permission. Why does one way work, but not the other? And what permissions do I have to change to have it work? Thanks, S List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
