Share via

Unable to Edit Group Policy

Anonymous
2023-11-12T05:39:35+00:00

Dear All,

We are facing an issue with group policy. when we try to edit group policy we are getting the following message.

"Failed to open the group policy object. you might not hve the appropritae rights. Details: The network name cannot be found."

Screenshot attached for your reference.

We have 3 domain controller.

Windows server 2012R2 (Was previously primary domain controller).

Windows Server 2016 ( ADC).

Windows Server 2022 (Migrated roles to this server, and currently this is the PDC)

Also , from this two servers we are not able to open group policy.

Windows server 2012R2 (Was previously primary domain controller).

Windows Server 2016 ( ADC).

Can anyone kindly help us to fix this issue.

Thanks and Regards

Faiz

Windows for business | Windows Server | Directory services | Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-11-16T08:08:59+00:00

    Hello Mohamed Faiz PT,

    Thank you for your reply.

    1.Please check if SYSVOL replication is OK.

    On 2012 R2, create folder1 under \domain.com\SYSVOL\domain.com\Policies
    On 2016 create folder2 under \domain.com\SYSVOL\domain.com\Policies
    On 2022 create folder3 under \domain.com\SYSVOL\domain.com\Policies

    At last, check if folder2 and folder3 are replicated to 2012 R2.
    check if folder1 and folder3 are replicated to 2016.
    check if folder1 and folder2 are replicated to 2022.

    https://learn-attachment.microsoft.com/api/attachments/b075c410-7642-40e0-9494-241b62f61367?platform=QnA"https://learn-attachment.microsoft.com/api/attachments/01b2da46-7fcd-4c0a-b33b-7d4feebe30cf?platform=QnA" title="filestore.community.support.microsoft.com" rel="ugc nofollow">

    There are 6 GPOs in my domain.


    3.And check if the GPO you are editing is in \domain.com\SYSVOL\domain.com\Policies on DC?

    Best Regards,
    Daisy Zhou

    0 comments
  2. Anonymous
    2023-11-16T04:32:41+00:00

    Dear Daisy,

    I tried to edit GPO in all the DCs, The following are the responses.

    1. In 2012 and 2022 i could open the group policy but was not able to edit it.
    2. in 2016, the GPO was not able to open.

    Kindly advise the next steps to fix this issue.

    Thanks and Regards

    Faiz

    0 comments
  3. Anonymous
    2023-11-15T09:00:40+00:00

    Hello Mohamed Faiz PT,

    Thank you for your reply.

    AD replication is OK.

    Please check if SYSVOL and Netlogon are shared on three DCs. Please run net share command on three DCs.

    It seems there is issue about sysvol replication. Please check If you can open or edit any GPO on any one DC, I mean if there is no issue about opening/editing any GPO on one DC.

    https://learn-attachment.microsoft.com/api/attachments/6769298c-6a0c-4b0c-a771-c1a1070d3676?platform=QnA

  5. Anonymous
    2023-11-13T06:36:15+00:00

    Hello Mohamed Faiz PT,

    Thank you for posting in Microsoft Community forum.

    1.What is you forest functional level and domain functional level?
    2.What is the SYSVOL replication type （FRS or DFSR）?
    3.Can you open/edit the same "Default Domain Policy" on server 2022?
    4.Can you open/edit other GPO on 2012 R2 or/and 2016?

    Please check the AD replication status by running commands below on PDC.
    repadmin /showrepl >C:\rep1.txt
    repadmin /replsum >C:\rep2.txt

    repadmin /showrepl * /csv >c:\repsum.csv

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments