GPO Problems

[Robert]

I am having problems with Group Policy, I keep getting this warning in my
application log and don't know how to reolve it:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/5/04
Time: 11:14:59 AM
User: N/A
Computer: GOLDSERVER
Description:
Security policies were propagated with warning. 0x57 : The parameter is
incorrect.

Advanced help for this problem is available on
http://support.microsoft.com. Query for "troubleshooting 1202 events".

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Also, I cannot log into the Domain Policy Object Editor, I receive an
error: Failed to open Group Policy Object. You may not have appropriate
rights. The parameter is incorrect.

I am logged in as administrator.

[Steven L Umbach]

Make sure that the sysvol share is still shared and that you have proper
permissions to it for share and ntfs [administrator/system full control]. It
should show and be accessible in My Network Places to verify that it still
is shared. Also verify that the pdc fsmo is up and running. The links below
may help. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;294257
http://www.eventid.net/display.asp?eventid=1202&eventno=348&source=SceCli&phase=1
-- EventId.net link for your error with many comments.

"Robert" <rob...@nospam.com> wrote in message
news:u6JBPAwq...@TK2MSFTNGP15.phx.gbl...

[Steve Duff [MVP]]

It is almost a certainty that you have a permissions problem in
group policy. Since you can't open the default domain policy, that's
a good place to start.

Open AD Users and Computers, right-click on the domain (root) and select
the group policy tab there and you can get to the default domain policy's security
settings. Once you've checked those and security on the domain object itself, drill
down into the policy until you find the issues.

Steve Duff, MCSE, MVP
Ergodic Systems, Inc.

"Robert" <rob...@nospam.com> wrote in message news:u6JBPAwq...@TK2MSFTNGP15.phx.gbl...

[Robert]

Steve Duff [MVP] woke up on Wed, 06 Oct 2004 03:02:28 GMT and sat in
microsoft.public.windows.server.security writing in message
news:eln5sD1q...@TK2MSFTNGP12.phx.gbl

I appreciate the suggestions so far. At this point I am still unable to
open the Group Policy Object Editor. I ensured that Full Control was set
for Admins/Domain Admins/System and it still does not allow me to open
it.

I installed the Group Policy Management Console, this let me see that I
did not have a default Domain Group Policy, even though there 'appeared'
to be one. I then restored the default Domain & Domain Controllers
Policy. This at least fixed my previous Event Warnings and fixed the
Client side warnings I was getting on my workstations. After restoring I
am still not able to open the GPO.

I tried using DSACLS to reset my Group Policies Permissions in case they
were denied but to no avail. When I use ADSIEditor the containers do not
show the access permissions have been denied.

Not sure what to try next.