RE: [ActiveDir] Failed to open Group Policy

[mathif]

Title: Message

Oops after this change, my exchange 2k server is down.

Actually this is an Additional Domain Controller. Now the mail server is totaly down and i am unable to restart the Exchange services.Tried to restart server but didnt help. I have recreated the sysvol structure here but didnt help.

Any help pleaseee.

Thanks,

aThif

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, 7 April 2004 2:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Failed to open Group Policy

Hi Athif, I don't see the guid of the GPO in this ldp output. Follow these directions to obtain the guid for the Default Domain Policy. Then it is this guid you use to rebuild the sysvol structure.

 

Open ldp, connect and bind to the server.

Select Connection > New to clear the screen

Select Browse > Search

In the base DN type dc=ebttikarhq,dc=com

Click the Subtree radio button

in the filter box type this...     (&(objectClass=groupPolicyContainer)(displayName=Default Domain Policy))

Click the options button, delete everything from the attributes box and type in...    name

 

Run the search, it will give you the correct guid. Now recreate the sysvol structure as per the kb article and try again to open the default domain policy.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 12:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Failed to open Group Policy

Do you have a second DC in the domain by any chance? If you do you should check the other DC's in case they already have the correct sysvol structure. If they do you may have a replication problem that can be resolved without manually creating files.

 

According to the kb, once you have recreated the sysvol folder structure you should have a blank policy that you can edit with the snap-in. Are you trying to edit the default domain policy? If this is still not working, run a dcdiag /v and post back any errors it shows up.

 

Also read this and check if any of the event log errors it mentions are present http://support.microsoft.com/?id=258296

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: 07 April 2004 10:19
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Failed to open Group Policy

Hi Simon,

Thanks for the link. I have also followed the same from http://www.jsiinc.com/SUBG/TIP3100/rh3125.htm

Since, I dont have backup, I have recreated the folder structure, since i culdnt find GUIDs in policies folder. I took that from Active Directory, I culd find 3 GUIDs, then created a folder with this GUID name and then 2 subfolders, machine and user.

Now, how shuld i proceed. When will the contents of the folders will be recreated. Even now, i can open the GPO.

Do, i need to use SECEDIT to refresh the GPO.

 

Please let me know.

 

Thanks,

Athif

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 12:04 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Failed to open Group Policy

Have a read of this and see if it helps. It basically says to check your sysvol folder for problems. 

http://support.microsoft.com/?id=253268

 

Another couple of options thrown up by a kb search are to check the account is not denied permissions on the GPO and to check your PDC Emulator is up and available.

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: 07 April 2004 09:51
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Failed to open Group Policy

Hi all,

When i am trying to open GPO for the domain thru Terminal Services, I am getting this error, "Failed to open the Group Policy Object. You may not have apporpriate rights.Details: The system cannot find the path specified"

 

Operating System windows 2000 Advanced Server, SP4.

 

Any thoughts!

 

TIA,

Athif

-----------------------------------------------------

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom/which they are addressed. If you have received this email in error please notify the system manager at the following email address: [EMAIL PROTECTED] . Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Al Faisaliah Group. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, arrive late or contain viruses. The sender therefore does not accept liability for any errors or omissions in the context of this message, which arise as a result of Internet transmission. Finally, the recipient should check this email and any attachments for the presence of viruses. Al Faisaliah Group accepts no liability for any damage caused by any virus ! transmitted by this email.

-----------------------------------------------------