psunith

ello All,

I am having a major problem editing my group poilcy in my domain controller. I am logging in as administrator of the domain controller but anytime i try to edit any "Domain Controller Security Policy" & "Domain Security Policy" & when I click "Apply" to save the changes I get this error:

Access is Denied.
Failed to Save.
\\domain name\sysvol\domain name\policies\{6AC1786C-016F-11D2-945F-00C04FB9-84F9}\Machine\Microsoft\Windows NT\Sec Edit\GptTmpl.inf
Make sure you have the right permissions to this object.

I opened the GptTmpl.inf using the notepad & pls find the text below:

[Unicode]
Unicode=yes
[Event Audit]
AuditSystemEvents = 1
AuditLogonEvents = 1
AuditObjectAccess = 0
AuditPrivilegeUse = 0
AuditPolicyChange = 1
AuditAccountManage = 1
AuditProcessTracking = 0
AuditDSAccess = 1
AuditAccountLogon = 1
[Registry Values]
MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity=4,1
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal=4,1
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel=4,2
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature=4,1
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature=4,1
[Version]
signature="$CHICAGO$"
Revision=1
[Privilege Rights]
SeAssignPrimaryTokenPrivilege = *S-1-5-19,*S-1-5-20
SeAuditPrivilege = *S-1-5-19,*S-1-5-20
SeBackupPrivilege = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-549
SeBatchLogonRight = *S-1-5-21-3313346923-3221842276-3961659373-1135,*S-1-5-19,*S-1-5-21-3313346923-3221842276-3961659373-1001
SeChangeNotifyPrivilege = *S-1-1-0,*S-1-5-32-544,*S-1-5-11,*S-1-5-32-554
SeCreatePagefilePrivilege = *S-1-5-32-544
SeCreatePermanentPrivilege =
SeCreateTokenPrivilege =
SeDebugPrivilege = *S-1-5-32-544
SeIncreaseBasePriorityPrivilege = *S-1-5-32-544
SeIncreaseQuotaPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544
SeInteractiveLogonRight = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-548,*S-1-5-32-549,*S-1-5-32-550
SeLoadDriverPrivilege = *S-1-5-32-544,*S-1-5-32-550
SeLockMemoryPrivilege =
SeMachineAccountPrivilege = *S-1-5-11
SeNetworkLogonRight = *S-1-1-0,*S-1-5-32-544,*S-1-5-11,*S-1-5-9,*S-1-5-32-554
SeProfileSingleProcessPrivilege = *S-1-5-32-544
SeRemoteShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-549
SeRestorePrivilege = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-549
SeSecurityPrivilege = *S-1-5-32-544
SeServiceLogonRight = *S-1-5-20
SeShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-549,*S-1-5-32-550
SeSystemEnvironmentPrivilege = *S-1-5-32-544
SeSystemProfilePrivilege = *S-1-5-32-544
SeSystemTimePrivilege = *S-1-5-19,*S-1-5-32-544,*S-1-5-32-549
SeTakeOwnershipPrivilege = *S-1-5-32-544
SeTcbPrivilege =
SeDenyInteractiveLogonRight = *S-1-5-21-3313346923-3221842276-3961659373-1135,*S-1-5-21-3313346923-3221842276-3961659373-1001
SeDenyBatchLogonRight =
SeDenyServiceLogonRight = *S-1-5-21-3313346923-3221842276-3961659373-1135
SeDenyNetworkLogonRight = *S-1-5-21-3313346923-3221842276-3961659373-1135,*S-1-5-21-3313346923-3221842276-3961659373-1001
SeUndockPrivilege = *S-1-5-32-544
SeSyncAgentPrivilege =
SeEnableDelegationPrivilege = *S-1-5-32-544


Please tell me how can i correct this situation.

Thank You