Cannot update group policy to all computers access denied

Question

Cannot update group policy to all computers access denied

Tutek 261

Hi,

domain server 2012 r2 I'm trying to update GPO to all computers, and get multiple access denied 8007005 errors. But when I sit at any computer and do: gpupdate /force the computer and users settings are applied.

Clément BETACORNE 2,011 Reputation points

2022-02-07T08:55:10.023+00:00

Hello,

How do you proceed to update GPO to all computers, are you using GPMC, PowerShell or PsExec ?
Did you try to run Invoke-GPUpdate –computer targetcomputer -force from an elevated powershell prompt to see if you have the same message ?

Regards,
Tutek 261 Reputation points

2022-02-07T09:08:02.823+00:00

I use group policy management console, then on OU I click Group Policy Update.
On administrator Powershell when I did: Invoke-GPUpdate –computer pc01 -force
then I don't get any error.
Clément BETACORNE 2,011 Reputation points

2022-02-07T10:17:33.05+00:00

I did not mention it but you ran the command Invoke-GPUpdate –computer pc01 -force remotely from the computer where you run the GPMC ?
Tutek 261 Reputation points

2022-02-07T11:41:03.92+00:00

I run this command on domain controller, and use group policy update from domain controller also.
Clément BETACORNE 2,011 Reputation points

2022-02-07T14:35:24.507+00:00

Do you have a GroupPolicy folder under Microsoft/Windows in the task Scheduler when you check locally on one of your remote computer ?

Regards,

Clément BETACORNE 2,011 Reputation points

2022-02-07T08:55:10.023+00:00

Hello,

How do you proceed to update GPO to all computers, are you using GPMC, PowerShell or PsExec ?
Did you try to run Invoke-GPUpdate –computer targetcomputer -force from an elevated powershell prompt to see if you have the same message ?

Regards,
Tutek 261 Reputation points

2022-02-07T09:08:02.823+00:00

I use group policy management console, then on OU I click Group Policy Update.
On administrator Powershell when I did: Invoke-GPUpdate –computer pc01 -force
then I don't get any error.
Clément BETACORNE 2,011 Reputation points

2022-02-07T10:17:33.05+00:00

I did not mention it but you ran the command Invoke-GPUpdate –computer pc01 -force remotely from the computer where you run the GPMC ?
Tutek 261 Reputation points

2022-02-07T11:41:03.92+00:00

I run this command on domain controller, and use group policy update from domain controller also.
Clément BETACORNE 2,011 Reputation points

2022-02-07T14:35:24.507+00:00

Do you have a GroupPolicy folder under Microsoft/Windows in the task Scheduler when you check locally on one of your remote computer ?

Regards,

Answer 1

Hi there,

Access Denied indicates that you reached the resource, but for whatever reason, your access level/permissions were insufficient.

Make sure Authenticated Users were listed and have Read permission of SYSVOL folder. Also, make sure there is no Deny permission in the SYSVOL ACL list.

To schedule a Group Policy refresh to run on all computers in an OU by using the GPMC
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj134201(v=ws.11)

-------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--

Cannot update group policy to all computers access denied

1 answer

Activity