none
AGMP permissions

    Question

  • We recently Installed AGMP on the Server 2012 R2 server

    Then installed AGMP client on another terminal server where we create/edit GPO's

    Somehow when i go to Change Control - to create a new GPO i get 

    [GPMC Error] Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

    My account has Role - Full Contol on Domain Delegation tab

    And Has Edit Settings,delete, modify security  Permissions on the Production Delegation tab

    The Group have Full Control On the GPMC server folders 

    %systemroot%\temp
    %ProgramData%\Microsoft\AGPM
    Service account and my Admin account is member of - Group Policy Creator Owners and Backup Operators

    Any advice

    Tuesday, March 28, 2017 3:49 PM

All replies

  • Hi,

    >>[GPMC Error] Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

    Creation of GPOs is controlled by the list of accounts on the Delegation tab on the Group Policy Objects node in the GPMC.

    To finalize the configuration, all admins who need to edit GPOs must be added to the appropriate Access Control Lists (ACLs) within AGPM. “

    see link below:

    https://technet.microsoft.com/en-us/library/2008.01.agpm.aspx

    Best regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, March 29, 2017 9:06 AM
    Moderator
  • Already have done that 
    Thursday, March 30, 2017 6:23 AM
  • Hi Kitaab,

    Did this issue was solved? if not, please share us the current situation for further assistance.

    Best regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 05, 2017 9:49 AM
    Moderator
  • Not sure how but somehow it looks like the issue was fixed.
    Tuesday, April 11, 2017 12:56 PM