Hi guys,
I have a small network here running 2 domain controllers (Win Server 2003R2 - SP2). I went back to check on a couple of very simple GPOs I created yesterday, and cannot edit them. When I right-click/edit, I get "Failed to open the Group Policy Object. You may not have appropriate rights. The system cannot find the path specified."
This issue only affects the GPOs I created yesterday, and one other that was created a few months ago. Other than those, all my existing GPOs perform and edit just fine. And funny enough, one of the GPOs that I cannot edit is actually being applied and has replicated to DC2. The errors themselves only seem to be occurring since yesterday. In the event log on the DC, I get Event 1030 and 1058:
1030
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."
1058
Windows cannot access the file gpt.ini for GPO cn={F39FE39F-6DAA-4AC1-B89A-03CD7950E6E9},cn=policies,cn=system,DC=ARP,DC=ST,DC=NET. The file must be present at the location <\\ARP.ST.NET\SysVol\ARP.ST.NET\Policies\{F39FE39F-6DAA-4AC1-B89A-03CD7950E6E9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.
The file is there, and I can browse to it. The permissions on the file appear to be correct.
I've read in a couple of places that this could be a DFS MUP cache issue that might be resolved just by rebooting, or possibly running dfsutil /flushmupcache and gpupdate /force.
There was an issue a few months ago where DC2 was unavailable for a couple of days, and DC1 has not been rebooted since then. I think it's possible that this issue results from that. Before I run those commands and reboot the DCs tonight, I just wanted to see if anyone knew of any reason not to do that, or if these symptoms might be indicative of another issue. If anyone has any ideas or suggestions, I'd love to read them. Thanks very much...