Can't edit Group Policies

If I RDP into a server and use AD Users and Computers. I can edit Group
Policies. If I try the same thing from my XP computer using Administrative
Tools/Users Computers, the Edit button, and all other buttons except
Properties, is greyed out.
I am a Domain Admin.
What is the problem here?

Thanks

Try to download and install GPMC.

"JohnB" <> wrote in message
news:#...
> If I RDP into a server and use AD Users and Computers. I can edit Group
> Policies. If I try the same thing from my XP computer using
> Administrative Tools/Users Computers, the Edit button, and all other
> buttons except Properties, is greyed out.
> I am a Domain Admin.
> What is the problem here?
>
> Thanks
>

Just tried it. Same thing.



"Dusko Savatovic" <> wrote in message
news:%...
> Try to download and install GPMC.
>
> "JohnB" <> wrote in message
> news:#...
>> If I RDP into a server and use AD Users and Computers. I can edit Group
>> Policies. If I try the same thing from my XP computer using
>> Administrative Tools/Users Computers, the Edit button, and all other
>> buttons except Properties, is greyed out.
>> I am a Domain Admin.
>> What is the problem here?
>>
>> Thanks
>>

Number of reasons are possible:
1. Your XP client is not part of the domain you try to manage

2. Your XP got dropped from the domain and may need re-joining.

3. Firewall may be blocking you.

4. Firewall on the DC may be restricting RPC connections to certain ranges
of IP addresses.

"JohnB" <> wrote in message
news:#...
> Just tried it. Same thing.
>
>
>
> "Dusko Savatovic" <> wrote in message
> news:%...
>> Try to download and install GPMC.
>>
>> "JohnB" <> wrote in message
>> news:#...
>>> If I RDP into a server and use AD Users and Computers. I can edit Group
>>> Policies. If I try the same thing from my XP computer using
>>> Administrative Tools/Users Computers, the Edit button, and all other
>>> buttons except Properties, is greyed out.
>>> I am a Domain Admin.
>>> What is the problem here?
>>>
>>> Thanks
>>>
>
>

"JohnB" <> wrote in message
news:%...
> If I RDP into a server and use AD Users and Computers. I can edit Group
> Policies. If I try the same thing from my XP computer using
> Administrative Tools/Users Computers, the Edit button, and all other
> buttons except Properties, is greyed out.
> I am a Domain Admin.
> What is the problem here?
>
> Thanks

In addition to Dusko's suggestions, have the full adminpak tools been
installed on your workstation, or just a subset of the tools?

Are there any errors in the event logs on your workstation, such as possibly
EventID#s 1030, 1058 or 11166?


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

It's none of those. My machine is still part of the domain. Windows
firewall is turned off on the DC's. My PC and the DC's are on the same
subnet.


"Dusko Savatovic" <> wrote in message
news:%...
> Number of reasons are possible:
> 1. Your XP client is not part of the domain you try to manage
>
> 2. Your XP got dropped from the domain and may need re-joining.
>
> 3. Firewall may be blocking you.
>
> 4. Firewall on the DC may be restricting RPC connections to certain ranges
> of IP addresses.
>
> "JohnB" <> wrote in message
> news:#...
>> Just tried it. Same thing.
>>
>>
>>
>> "Dusko Savatovic" <> wrote in message
>> news:%...
>>> Try to download and install GPMC.
>>>
>>> "JohnB" <> wrote in message
>>> news:#...
>>>> If I RDP into a server and use AD Users and Computers. I can edit
>>>> Group Policies. If I try the same thing from my XP computer using
>>>> Administrative Tools/Users Computers, the Edit button, and all other
>>>> buttons except Properties, is greyed out.
>>>> I am a Domain Admin.
>>>> What is the problem here?
>>>>
>>>> Thanks
>>>>
>>
>>

I just checked, and I don't have any of those Event ID's.
Yes, I do have the full adminpak installed.


"Ace Fekay [MCT]" <> wrote in message
news:%...
> "JohnB" <> wrote in message
> news:%...
>> If I RDP into a server and use AD Users and Computers. I can edit Group
>> Policies. If I try the same thing from my XP computer using
>> Administrative Tools/Users Computers, the Edit button, and all other
>> buttons except Properties, is greyed out.
>> I am a Domain Admin.
>> What is the problem here?
>>
>> Thanks
>
> In addition to Dusko's suggestions, have the full adminpak tools been
> installed on your workstation, or just a subset of the tools?
>
> Are there any errors in the event logs on your workstation, such as
> possibly EventID#s 1030, 1058 or 11166?
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
> 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
>
>

"JohnB" <> wrote in message
news:...
>I just checked, and I don't have any of those Event ID's.
> Yes, I do have the full adminpak installed.

You don't have those EventIDs? On your workstation, DCs, or both?

And the GPMC is useless, too?

Can you post an ipconfig /all of your workstation and from the DC,
preferrably from the PDC Emulator?

Are any of the DCs multihomed?

Ace

The only thing I can think of that has changed is, we added a 2008 server.
But it is still a member server.
See below..

>
> You don't have those EventIDs? On your workstation, DCs, or both?
>
On neither


> And the GPMC is useless, too?
>
Yes, the "edit" option is greyed out

> Can you post an ipconfig /all of your workstation and from the DC,
> preferrably from the PDC Emulator?
>


Domain Controller
Windows IP Configuration

Host Name . . . . . . . . . . . . : bdadmin
Primary Dns Suffix . . . . . . . : bd.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : bd.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 Network Connection
Physical Address. . . . . . . . . : 00-B0-D0-F9-DA-CE
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.3
DNS Servers . . . . . . . . . . . : 192.168.10.12
192.168.10.13
Primary WINS Server . . . . . . . : 192.168.10.12
Secondary WINS Server . . . . . . : 192.168.10.13
-------------------------------------------------------

XP Workstation

Windows IP Configuration

Host Name . . . . . . . . . . . . : DC3KBTK1
Primary Dns Suffix . . . . . . . : bd.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : bd.local


Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82567LM Gigabit Network
Con
nection
Physical Address. . . . . . . . . : 00-24-E8-C2-56-0C
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.10.48
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.3
DHCP Server . . . . . . . . . . . : 192.168.10.12
DNS Servers . . . . . . . . . . . : 192.168.10.12
192.168.10.13
Primary WINS Server . . . . . . . : 192.168.10.12
Secondary WINS Server . . . . . . : 192.168.10.13


> Are any of the DCs multihomed?
>
No

Weird, now I just noticed other MMCs don't work, like DNS and DHCP.

I get "access is denied". But it's fine from the server.



"Ace Fekay [MCT]" <> wrote in message
news:%23GqR$...
> "JohnB" <> wrote in message
> news:...
>>I just checked, and I don't have any of those Event ID's.
>> Yes, I do have the full adminpak installed.
>
> You don't have those EventIDs? On your workstation, DCs, or both?
>
> And the GPMC is useless, too?
>
> Can you post an ipconfig /all of your workstation and from the DC,
> preferrably from the PDC Emulator?
>
> Are any of the DCs multihomed?
>
> Ace
>
>