Failed to open Group Policy Object. You may not have appropriate rights.

Discussion in 'Active Directory' started by Sumit, Jan 19, 2004.

  1. Sumit

    Sumit Guest

    Hi

    I have installed Active Directory and desiganted the machine as DC. I am trying to access Domain Secutrity Policy snap-in from Administrative Tool but it gives me error, which is "Failed to open Group Policy Object. You may not have appropriate rights."

    Please help me out here

    Thanks
    Sumit
     
    Sumit, Jan 19, 2004
    #1
    1. Advertisements

  2. circa Sun, 18 Jan 2004 19:56:14 -0800, in
    microsoft.public.windows.server.active_directory, =?Utf-8?B?U3VtaXQ=?
    = () said,
    What are the DNS settings? Is this the only machine in the domain? Is
    it a DNS server? Is it authoritative for its domain? Is it pointed to
    itself for resolution? Is it pointed to a different server for DNS
    resolution? If so, is that server authoritative for the domain, or
    does it "know" which server(s) is/are?

    Laura
     
    Laura A. Robinson [MVP], Jan 19, 2004
    #2
    1. Advertisements

  3. Sumit

    Sumit Guest

    Hi Laura

    Yes this is the only machine in the domain. No it is not a DNS server.
    Please tell me, how can i make it pointed to itself for DNS resolution
     
    Sumit, Jan 19, 2004
    #3
  4. Sumit

    Sumit Guest

    Hi Laura,

    If you are going to deploy Active Directory, then the DNS servers used to support Active Directory will be installed and configured automatically by the Active Directory Installation Wizard. That means DNS server should have been installed.


    ----- Laura A. Robinson [MVP] wrote: -----

    circa Sun, 18 Jan 2004 19:56:14 -0800, in
    microsoft.public.windows.server.active_directory, =?Utf-8?B?U3VtaXQ=?
    = () said,
    What are the DNS settings? Is this the only machine in the domain? Is
    it a DNS server? Is it authoritative for its domain? Is it pointed to
    itself for resolution? Is it pointed to a different server for DNS
    resolution? If so, is that server authoritative for the domain, or
    does it "know" which server(s) is/are?

    Laura
     
    Sumit, Jan 19, 2004
    #4
  5. circa Sun, 18 Jan 2004 22:06:12 -0800, in
    microsoft.public.windows.server.active_directory, =?Utf-8?B?U3VtaXQ=?
    = () said,
    No, the *option* to automatically configure DNS can be offered during
    DCPromo, but it is neither required nor automatically displayed as an
    option. If your server was pointed to a DNS server that was
    authoritative for the name of the domain you were creating, and if
    that DNS server accepted dynamic updates, then you would not have
    been prompted to install DNS as part of DCPromo.

    So, first things first:

    1. Is DNS installed on the DC? You can verify by checking in your
    Administrative Tools folder for the DNS manager.
    2. If DNS is installed on the DC, do you see the zone corresponding
    to your domain name listed there?
    3. If 1 and 2 are both "yes", is the zone configured to allow dynamic
    updates (zone properties)?
    4. If all of the above are "yes", in your TCP/IP properties for the
    DCs NIC(s), is it configured with its own address as its preferred
    DNS server?

    Laura
     
    Laura A. Robinson [MVP], Jan 21, 2004
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.