Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Windows 8 and Default Domain Policy modification issue

Unanswered Windows 8 and Default Domain Policy modification issue

  • Friday, March 08, 2013 1:40 PM
     
     
    Sign In to Vote
    0

    Hi,

    I'm unable to edit the default domain policy from my new Windows 8 desktop.  It's the only Win8 in the environment so I'm not able to easily test another one unfortunately.  The error I receive is:

    Group Policy Error

    Failed to open the Group Policy Object.  You might not have the appropriate rights.

    Details: The volume for a file has been externally altered so that the opened file is no longer valid.

    I have checked from a Win7 and a 2003 machine and can access and edit the GPO without issue using the same account.  The Win8 desktop is a fresh install with the RSAT tools installed, Exchange 2010 tools and a few basic applicaitons (non of which stick out as having anything to do with AD management).

    It only occurs if I click edit on the GPO.  I'm able to successfully view the policy and edit the permissions etc.  Have rebooted and the machine is current with patches as of now.

    thanks

    Andy

    Cheers Andy

     

All Replies

  • Saturday, March 09, 2013 11:31 AM
     
     
    Sign In to Vote
    0
    This certainly seems to be an issue with the Win8 machine as randomly one of the 6 DCs in the main site doesn't show the replicate connections options in Sites/Services.  From another machine I can see them so it has to be something odd with the AD tools on this machine.  Has anyone else seen anything like this sort of thing?

    Cheers Andy

     
  • Monday, March 11, 2013 7:27 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    According to your description, the issue only occurred when you click to edit the GPO. And only occurred on Windows 8. I would like suggest you to follow below suggestions to narrow down the issue:

    1. Check out whether the issue only occurred to Default domain policy object.

    2. Test on another new installed Windows 8 client with only RSAT installed.

    3. Create another new account and add it to domain admin group to test again.

    4. Run dcdiag on DCs to check out whether the replications work fine.

    Hope this helps.

    Regards,

    Yan Li

    If you have any feedback on our support, please click here .

    Cataleya Li
    TechNet Community Support


     
  • Monday, March 11, 2013 8:06 AM
     
     
    Sign In to Vote
    0

    Hi,

    What about firewall services on your windows 8 ? Do you see any profile associated with it?  

    Regards, Server Engineer - Server Support

     
  • Monday, March 11, 2013 10:17 AM
     
     
    Sign In to Vote
    0
    Are you facing any issues while accessing AD resources from Windows 8? However I would also suggest you to disable basic Windows Firewall for testsing purpose. check this from Windows 8 net view \\DCname and net view \\IPAdress of the DC. If these commands fails to resolve, then it might be a secure channel issue. You might need to unjoin and rejoin Win8 to domain.
     
  • Monday, March 11, 2013 11:19 AM
     
     
    Sign In to Vote
    0

    Hi guys,

    Thanks for the replies, hope I cover everything below.  The oddity here is that I can edit any other policy just not the default domain policy.  I can edit it from another machine (2003) which indicates it isn't a permissions issue.

    The firewall is off due to policy at the moment.

    DCDiag doesn't show any issues and I've checked repl with repadmin.

    I forgot (doh!) that I had another Win8 machine.  It's an expired trial license but does show the same issue!

    We tried another domain admin and he also gets the same error message.  (Should have thought to try that myself).

     
  • Wednesday, March 13, 2013 9:23 AM
     
     
    Sign In to Vote
    0

    Try to run "chkdsk /r" on your Win8 machine, and also run "sfc /scannow" using "Run as administrator".

    Regards,

    Diana

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

     
  • Wednesday, March 20, 2013 2:31 AM
     
     
    Sign In to Vote
    0

    Any update?

    Regards,

    Diana

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

     
  • Thursday, March 21, 2013 10:55 AM
     
     
    Sign In to Vote
    0

    Hello,

    as this belongs more to the GPO i would also ask in http://social.technet.microsoft.com/Forums/en-US/winserverGP/threads?page=1

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.