I recently demoted a Windows 2000 server. It had been the backup DC to a
Windows 2003 server. It seemed that the dcpromo went ok, and then the dreaded
1030/1058 Event Id’s started. I followed the usual advice of allowing
permissions to the SYSVOL folder, etc. Strange thing was, in the SYSVOL
folder was something I’d never seen before: a folder called
NtFrs_PreExisting__See_EventLog. To make a long story short, I tried to
repair the group policy for the domain and the domain controller; and seem to
be locked out of the administrative templates and dcpol.msc. If I try to
access the dcpol, or create a new group policy object; I get an access denied
no permissions message. If i click on a policy to edit, the areas under
administrative templates are blank (there are no items to show in this view.
is displayed). If I right click on administrative templates to add a
template, I can browse to their location, highlight a template but it will
not copy over (another access is denied message, as well as make sure the
disk is not write-protected…)
What I’ve done so far…. besides pull my hair out…. gave administrator
full permission to the entire c:\ drive… still get the same message.
Created a new super user, signed in as that user, same problems. DNS is
working fine, the policies are being handed out properly to the users on the
domain, there are no error messages being logged and I’ve been ‘googling’ for
days! Any help would be appreciated!