cant edit default GPO

dear folks.....

im a domain admin but when i want to edit some settings of default GPO and save it it says access denied !!!!

what to do??

its windows server 2008 standard edition DC.

i have given myself full right but though it says access denied

also gave full rights to domain admins........

January 21st, 2014 10:33pm

You may want to check the ACL on the Delegation tab (Advanced button) of the GPO in question as well as what security principle is set as the Owner. 

Another question - Does this happen on other GPO's? If not, it clearly indicates an issue with that particular policy.

Free Windows Admin Tool Kit Click here and download it now
January 21st, 2014 10:44pm

hi dirk......

i cant edit any of the GPO's !!!!!

domain admins are given read, write full right in GPO's but though i cant 

any idea what im missing ????

im only member of domain admin and domain admin has the rights but not working :-(

January 22nd, 2014 6:07am

Hi Istiaq,

Who is the owner of the GPOs, domain admins? Were there error events logged in the Event Viewer?
Regarding GPO permissions delegation, for double check, the following article can be referred to for more information.

Delegating Group Policy

http://technet.microsoft.com/en-us/library/cc782520(v=ws.10).aspx

Best regards,
Frank Shen

Free Windows Admin Tool Kit Click here and download it now
January 24th, 2014 3:46am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics