Networks

Ask something
Question Locked

GPMC Error

0 helpful
7 replies

by lord_orochi

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have a strange error on our Win 2k3 server. The built in administrator account cannot edit group policy. The other admin level accounts can, but when the built in admin opens GPMC and right clicks a policy and chooses edit the following error pops up:

Group Policy Error
Failed to open the Group Policy Object. You may not have appropriate rights.
Details: Logon Failure: unknown user name or bad password.

This only happens when logged in as the built in administrator (logged on locally at the machine too).
This problem has apparently existed for years. Can someone help?

7 replies

by lord_orochi

Has anyone at least heard of something like this happening?
Any clues would be appreciated.

by ic-it

Perhaps someone set it up as a "semi-fake" account. They may have removed some permissions from certain folders? Verify the permissions on Program Files, System32 and the Windows folder.
Corrupted account? Copy a known good admin profile to the Built-in admin profile?

by lord_orochi

But due to hardware issues that have come up with the server, it was decided to finally replace the aging machine. Thanks anyway for the suggestion.

by lord_orochi

Even though we have the new server ordered... it will take some time to get here and be set up. We are still having trouble. The policy that we have for the student users, suddenly became applied to the administrator accounts. Besides that, the admin accounts do not have the right to access the gpo now. This is very perplexing...

by ic-it

Domain Admin or even the Enterprise Admin.
Likely there is one section of the policy that you needed to exempt the administrators group (then even the above may not work.

Is there a DC you can log onto and temporarily unlink the offending GPO?

by lord_orochi

I wish that there was a higher account but the builtin administrator account is it... And it's the only dc at the moment. Always some form of fun trouble.

This discussion is closed to new replies.