Ask the Expert

Access problems on Windows 2000 domain

I cannot access the domain security policy, and in Active Directory I can't edit the default domain policy Windows 2000 domain. When I try to open the default domain policy, it gives me an error that I do not have permission. On the group policy tab in AD, the edit function is grayed. Group policy is working okay, but I need to make a change. This was a NT domain that has been upgraded to 2000 then switched to native. I am not sure when the access problem occurred, and I am not receiving any errors in the event log.

    Requires Free Membership to View

A corruption in the GPO's ACL has occurred. I'm not sure there is an easy solution. You may be able to delete the GPO file through Recovery Console, and then import a new un-changed version of the Default Domain GPO from another system.

This was first published in September 2004

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.