Regresar
-
Título
Checking out GPO: The directory is not empty. -
Descripción
In a multi domain single forest model, checking out a GPO in a child generates an error: 'The Directory is Not Empty', however editing GPO's in the forest root does not generate this error. -
Causa
GPO Admin is unable to authenticate to the Domain Controller of the child domain. -
Resolución
Add a preferred Domain Controller for the current Child Domain.
-
Right-click the domain, select Properties.
-
Select the Options tab, and click Add to choose the domain controller that GPOADmin will use for all Active Directory actions for each domain including the Forest Root and all Child Domains. By default, GPOADmin uses the Primary Domain Controller.
If adding a preferred DC does not resolve the issue, check to see if you get the same error using GPMC, replicating how GPOADmin imports settings into a GPO:- Open GPMC
- Right click the GPO and select Backup
- Right click the GPO and select Import Settings, selecting the backup created in Step 2 to import from
If you get the same Directory is not empty error, or a different error, please see the following Microsoft Article which has been known to resolve this native issue:
https://support.microsoft.com/en-us/kb/2667462
-