Wednesday, March 06, 2013 6:02 PM
I have a Server 2008 DC and am having permission issues when I try to edit my Domain Security Policy under GPMC. This happens with both the domain administrator account as well as mine (administrator). I checked the permissions under Sysvol and everything looks to be correct. I am able to edit the Domain Controllers Security Policy just fine.
The error I get is "Failed to open the group policy object. You may not have appropriate rights. Details: Unspecified Error".
When I go to the policy folder I see that the policy that I am unable to edit was modified about a week ago and seems to correspond with this issue. The only changes that were made at that time were adding some PKI certificates to the Domain Security Policy. Could these certs be causing the issue? Or is it more likely it just got corrupted during the change?
I am going to try and backup the policy then restore from it but wanted to see if anyone had ideas about the PKI Certificates being added to the policy OU causing problems?
Thursday, March 07, 2013 11:19 PM
I would have ask here.
Friday, March 08, 2013 2:22 AMModerator
This issue may occur when the Domain Administrators group has been denied access to the GPO.
Please read the following articles:
Meanwhile, i found the similar thread:
gpedit.msc fails: could not open the Group Policy Object on this computer, details: unspecified error
If the issue is not resolved, you can get more help from Group Policy Forum:
TechNet Community Support