Can’t Create GPO This security ID may not be assigned as the owner of this object.

Home Forums Server Operating Systems Windows Server 2012 / 2012 R2 Can’t Create GPO This security ID may not be assigned as the owner of this object.

Viewing 1 post (of 1 total)
  • Author
    Posts
  • Avatar
    bethk
    Member
    #167025

    Hi,

    I am unable to create a new GPO in my Domain 2012 R2 DC. I created many of the GPOs that are in the domain currently but recently I am getting:

    This security ID may not be assigned as the owner of this object.

    When trying to add a new policy. Tried the GUI and also from the powershell cmd new-gpo – hoping that perhaps I would get more diagnostic information from the powershell — but same message either way.

    From several sites I have read this error indicates the user doesn’t have the correct permissions for SOMETHING — but cannot figure out where it is missing.

    Tried resetting permissions to default via https://technet.microsoft.com/en-us/library/cc816750(v=ws.10).aspx

    C:Windowssystem32>icacls c:WindowsSYSVOL
    c:WindowsSYSVOL NT AUTHORITYAuthenticated Users: (RX)
    NT AUTHORITYAuthenticated Users: (OI)(CI)(IO)(GR,GE)
    BUILTINServer Operators: (RX)
    BUILTINServer Operators: (OI)(CI)(IO)(GR,GE)
    BUILTINAdministrators: (F)
    BUILTINAdministrators: (OI)(CI)(IO)(F)
    NT AUTHORITYSYSTEM: (F)
    NT AUTHORITYSYSTEM: (OI)(CI)(IO)(F)
    BUILTINAdministrators: (F)
    CREATOR OWNER: (OI)(CI)(IO)(F)

    Anyone have know what I am doing wrong? Where can I look?

    Really appreciate insights.

    Beth

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.