Thursday, October 29, 2009

gpedit.msc or (Group Policy Editor) access denied

When running a Resultant Set of Policy from the Group policy management Console (GPMC) the following error is displayed or Also, the following ‘access denied’ error appears when running gpresult.exe from a command prompt on the server:



Running on other servers seems okay, but on these specific servers there is a problem.
 
Resolution
This can be resolved by doing the following:
Go to “start menu”, “Run”, type “CMD” and Enter.
c:
cd\windows\system32
regsvr32 /n /I userenv.dll
cd\windows\system32\wbem
mofcomp scersop.mofs
gpupdate /force

or create a .cmd file and copy the script below

cd /d %windir%\system32
start /wait regsvr32 /n /I userenv.dll
cd wbem  
start /wait mofcomp scersop.mof
gpupdate /force
gpresult

Information on How to Use the Group Policy Results (GPResult.exe) Command Line Tool:
Intended for administrators, the Group Policy Results (GPResult.exe) command line tool verifies all policy settings in effect for a specific user or computer. Administrators can run GPResult on any remote computer within their scope of management. By default, GPResult returns settings in effect on the computer on which GPResult is run.

Using GPResult Command Line Tool:
Parameters: /s Computer        
Function: Specifies the name or IP address of a remote computer. (Do not use backslashes.) The default is the local computer.
Parameters: /u Domain\User
Function: Runs the command with the account permissions of the user that is specified by User or Domain\User. The default is the permissions of the current logged-on user on the computer that issues the command.
Parameters: /p Password
Function: Specifies the password of the user account that is specified in the /u parameter.
Parameters: /user TargetUserName
Function: Specifies the user name of the user whose RSOP data is to be displayed.
Parameters: /scope {user|computer}
Function: Displays either user or computer results. Valid values for the /scope parameter are user or computer. If you omit the /scope parameter, gpresult displays both user and computer settings.
Parameters: /v
Function: Specifies that the output display verbose policy information.
Parameters: /z
Function: Specifies that the output display all available information about Group Policy. Because this parameter produces more information than the /v parameter, redirect output to a text file when you use this parameter (for example, gpresult /z >policy.txt).
Parameters: /?
Function: Displays help at the command prompt.
      

No comments:

Post a Comment