When attempting to run GPRESULT I'm getting an access denied message.

I'm running GPRESULT directly on the server using an account with domain and
local administrative privileges.

The server is a Windows 2003 SP1 (member server) which is joined to a
Windows 2000 domain in Native mode.

I also get access denied when running RSOP on the server.

Any ideas?

Microsoft has hotfix for this issue.

"Error: Access Denied" Error Message When You Run the Ggpresult ....Error: Access Denied. When you run Gpresult.exe again, you may receive the same error message immediately. The error message is incorrect because ordinary ...
support.microsoft.com/kb/322852


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"littlsm" <littlsm@discussions.microsoft.com> wrote in message news:155C22D5-EC2A-4DD1-A1AB-BED2099B39DD@microsoft.com...
When attempting to run GPRESULT I'm getting an access denied message.

I'm running GPRESULT directly on the server using an account with domain and
local administrative privileges.

The server is a Windows 2003 SP1 (member server) which is joined to a
Windows 2000 domain in Native mode.

I also get access denied when running RSOP on the server.

Any ideas?

Thanks Robert. Couple of questions beofer I progress this.

Doesn't the description in this hotfix suggest that this hotfix is required
if the GPRESULT " access denied " error is appearing when GPRESULT is being
run my a normal user. I'm getting this error when running GPRESULT with an
account with administrative privileges.



"Robert L [MVP - Networking]" wrote:

Robert, is this KB article specific to XP or is it relevant to w2k3?

"Robert L [MVP - Networking]" wrote:

Sorry, this hotfix may not work for your situation. It is for XP and regular user. Any errors in the event viewer?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"littlsm" <littlsm@discussions.microsoft.com> wrote in message news:EDD81652-9A6E-4DB2-82FB-C679496B984D@microsoft.com...
Robert, is this KB article specific to XP or is it relevant to w2k3?

"Robert L [MVP - Networking]" wrote:

Nothing showing up in eventlog and all the polices appear to be applying
correctly.

Does RSOP try to autheticate against a DC?

"Robert L [MVP - Networking]" wrote:

Hi, we've fixed it with the following.

I ran the following commands to re-register the userenv.dll and recompile
the rsop mof file (no reboot needed)

Regsvr32 /n /I c:\winnt\system32\userenv.dll
(From c:\windows\system32\wbem)
Mofcomp scersop.mof
Gpupdate /force

All working fine.

Thanks for the help

"littlsm" wrote:

Hi, we've fixed it with the following.

I ran the following commands to re-register the userenv.dll and recompile
the rsop mof file (no reboot needed)

Regsvr32 /n /I c:\winnt\system32\userenv.dll
(From c:\windows\system32\wbem)
Mofcomp scersop.mof
Gpupdate /force

All working fine.

Thanks for the help

"littlsm" wrote:

Thank you for the feedback.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"littlsm" <littlsm@discussions.microsoft.com> wrote in message news:228848A8-4C44-48A2-BED3-0ED81013C419@microsoft.com...
Hi, we've fixed it with the following.

I ran the following commands to re-register the userenv.dll and recompile
the rsop mof file (no reboot needed)

Regsvr32 /n /I c:\winnt\system32\userenv.dll
(From c:\windows\system32\wbem)
Mofcomp scersop.mof
Gpupdate /force

All working fine.

Thanks for the help

"littlsm" wrote:

Try checking http://support.microsoft.com/kb/892500

Ensure dcom permissions or enabling the logging of dcom errors in the registry via the above KB. I had http://www.eggheadcafe.com/login.aspxthe same issue and it turned out I removed the everyone group from DCOM launch /access permissions via a group a security setting in group policy

http://support.microsoft.com/kb/914047 also gives details on this

Hope that works!