failed to open the group policy object. you may not have the appropriate rights. network access is denied

-

we have 1 way forest trust forest , forest b, have created universal group , added members in forest a.  then added domain local group in forest b.

we want (certain) users forest able manage group policies on forest b.

we've delegated local group rights edit gpo whenever try edit (even though option available) error: "failed open group policy object. may not have appropriate rights. network access denied"

any ideas be?

the "network access denied" part of error throwing me well.  doesn't give further info on this.

might simple we've missed if must keep missing :) !

any appreciated!

from items have read statement below has been in place since windows 2003, authentication setting forest trust? (link below) assume in trust forest b trusts forest , group setup in forest a? below verbiage sound true in your setup.

a one-way, forest trust between 2 forests allows members of trusted forest utilize resources located in trusting forest. however, trust operates in 1 direction. example, when one-way, forest trust created between forest (the trusted forest) , forest b (the trusting forest), members of forest can access resources located in forest b, members of forest b cannot access resources located in forest using same trust.  

https://technet.microsoft.com/en-us/library/cc738431(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/cc737072(v=ws.10).aspx
 delegation across forests supported managing group policy links. other tasks such creating, deleting, or modifying group policy objects across forests not supported.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)

-
hi we in process of migrating win 2003 ad win2008 r2. when noticed logs found many errors , warning alerts ca below --could not connect active directory. certificate services retry when processing requires active directory access. (event id 91)----certificate services sagia ca can not open certificate store @ cn=ntauthcertificates,cn=public key services,cn=services in active directory's configuration container. (event id 94, warning)--                                                                                            ...
Read more

Windows server 2012 r2 inplace upgrade failed

-
trying upgrade windows server 2012 2012r2 on physical box/nas (hosting vm's). this failed due "unknown error"? there several error logs, first few lines of 1 attached: setuperr.og (from c:\$windows.~bt\windows) 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user nt service\mssql$microsoft##wid. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user iis apppool\classic .net apppool. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:26:23, error      [0x0808fe] mig    plugin {0b23c863-4410-4153-8733-a60c9b1990fb}: loadlibraryex error (c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-textservicesframework-migration\imjpmig.dll) gle=126 2013-10-06 14:26:23, error      [0x0808fe] mig  ...
Read more

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

-
looking options resolve error , prevent in future. thanks help. hardware: 2 node dell hv cluster running2012r2 dc 8 nic/ea in multiplex mode 4x hyper-v 4x hosts storage: 2x synology nas, accessed through iscsi hosts , cluster relevant logs: log name:      microsoft-windows-failoverclustering/diagnostic source:        microsoft-windows-failoverclustering date:          event id:      2050 task category: none level:         warning keywords:       user:          system computer:      l description: [dcm] filter wimmount found @ unsafe altitude 180700 log name:      system source:        microsoft-windows-failoverclustering ...
Read more