windows server 2008 - Group Policy Object Creation Failed - This security ID may not be assigned as the owner of this object -
we have windows sbs 2008 domain controller (the 1 in our domain) , i'm trying create new group policy object handle printers. every time attempt create new gpo, either in group policy folder directly or linked in 1 of organizational folders receive following message - "this security id may not assigned owner of object." i've been looking around haven't found works. results search indicate people having trouble folder redirection policies. have folder redirection enabled, every workstation in domain running windows 7 professional, , no 1 having trouble redirection policy. i've double-checked sysvol directory , both system , administrators have appropriate rights. i've added sysadmin account group policy creator owners group (which again, has rights sysvol) still nothing. i've been @ day , i'm coming empty. there's nothing in event view logs, , created administrative level user or copy/pasting existing gpo. same message everytime. started happening week. have idea? i'm starting desperate.
looks managed solve it. not ideal, i'll share in case else has similar issue. looks permissions not correct had assumed. went through again , granted full control group policy creator owners group on following 3 folders: c:\windows\sysvol\sysvol, c:\windows\sysvol\sysvol\ourdomain.local, , c:\windows\sysvol\sysvol\ourdomain.local\policies. last one, set rights extend subfiles , folders. after quick logout reset permissions, able create new policy object.
Comments
Post a Comment