Unable to edit GPO with settings imported – Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

How I love Monday. Smile

Situation

Scenario today is:

1. Setup a new test Windows Server 2012 R2 Test Domain in Microsoft Virtual Environment.

2. Backup GPOs from existing Domain and convert the Folder containing the GPOs into ISO

3. Mount the ISO to the Virtualized Windows Server 2012 R2 Domain Controller

4. Create new GPOs and Import GPO setting directly from ISO.

5. Try to edit the GPO and….. encounter an error message – “Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

image

Anyone spotted the root cause? Hahaha… Actually, I encountered this problem before too.

What happened is when ISO mounted in virtual machine is DVD-Drive, right? The files are “Read-Only”…

So, when you import… It took the whole setting over!

Resolution

How to revert? Locate the GPO’s unique ID.

image

Go to the folder containing the GPO folder. Find the folder that is named after the GPO unique ID.

image

Under properties of the folder, uncheck “Read-Only” and select “Apply Changes to the folder.. subfolder and files”, and click OK.

image

Note that after you apply, you may noticed that under the properties page, the check box is marked “Read-Only”. Do not panic, just go and try to edit the GPO now. It should work.

Pointers to Note:

The solution here is target for single GPO issue. If you cannot edit ALL GPOs. The problem may lies with the permission of your SYSVOL. Which I suggest you to look else where for solution.

Advertisements
This entry was posted in Group Policy, Troubleshooting and tagged , . Bookmark the permalink.

One Response to Unable to edit GPO with settings imported – Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

  1. LedHed says:

    Thanks you! I’ve been chasing a solution to this for a month.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s