The "Yes" option is grayed out - even though I am using a Domain Administrator account to configure the product.

Did you use a Domain Admin account when installing SCE? Can you open the GPMC when logged on with the Domain Admin account?

Yes. I use this domain admin account to make Group Policy changes on the domain.

Hi, One thing, did you use local policy before? Bjrn Axll MVP - Advisec AB http://blog.advisec.com

Hi, One thing, did you use local policy before? Bjrn Axll MVP - Advisec AB http://blog.advisec.com

I have never used local policies on this server. It's a brand new server.

Are you able to open gpmc and dsa.msc with full administration priviledges on the machine?

I tried installing GPMC on the server, but the OS is 64-bit. GPMC is not supported on the 64-bit OS. I haven't tried installing DSA yet, but I will tomorrow.

Hi Damdem, The Domain-level grayed-out implies SCE cannot contact AD, the following steps can be used to verify this: 1.Verify if you can ping the domain (ping domain.com) 2.Open Active Directory Users and Computers and verify that you can connect to AD and create a group policy object. 3.If you are not able to ping the domain or connect to the domain in Active Directory Users and Computers, verify that the DNS settings on the Essentials server are configured correctly, and that a Domain Controller for the domain is available. 4. The Domain Policy option will also be grayed out if you have previously run the wizard and selected the Local policy option. To resolve this, run "SCECertPolicyConfigUtil.exe /ManagementGroup <management group name> /uninstall". 5. Restart Net Logon service. Hope it helps. --------------------- Regards, Jie-Feng Ren Microsoft Online Community Support

Jie-Feng Ren - MSFT wrote: Hi Damdem, The Domain-level grayed-out implies SCE cannot contact AD, the following steps can be used to verify this: 1.Verify if you can ping the domain (ping domain.com) 2.Open Active Directory Users and Computers and verify that you can connect to AD and create a group policy object. 3.If you are not able to ping the domain or connect to the domain in Active Directory Users and Computers, verify that the DNS settings on the Essentials server are configured correctly, and that a Domain Controller for the domain is available. 4. The Domain Policy option will also be grayed out if you have previously run the wizard and selected the Local policy option. To resolve this, run "SCECertPolicyConfigUtil.exe /ManagementGroup <management group name> /uninstall". 5. Restart Net Logon service. Hope it helps. --------------------- Regards, Jie-Feng Ren Microsoft Online Community Support Thanks, perfect solution.

Well, for me the story goes on here. I have two machines one DC with Exchange 2007 (server2008) and one Hyper-V server now with System Center Essentials 2007 installed on it. With my admin account i can create/modify and delete GPO's and i'm in full control of the AD and can do everything i want. From the SCE server i can ping to the domain and get reply's. I never ran the Feature config wizard before it's a brand new installation, but the "Yes, configure a domain-level Group Policy for me" is still gray. Does anyone know a solution for this? I already tried the five points that Jie-Feng said but it didn't work for me. This is the only topic on the whole internet about this problem so this is my only hope... Thanks in advance PS. I just looked into another post on this forum with the same problem. When i dive into the register there is a path under HKLM/Software/Microsoft/System Center Essentials/1.0/PolicySettings/ IsSCE with the value 1 When i'm on the SCE server and try to browse to the domain name, he saids he cannot acces the location, but i can ping the domain name. On the DC itself i can acces it but i cannot create a folder or a TXT file in the Policies folder..