When you deploy a GPO you get the following error:
Quest.Avalanche.Exceptions.AvalancheException: Error importing settings to =
object. ---> System.DirectoryServices.DirectoryServicesCOMException (0x8007=
202F): A constraint violation occurred. (Exception from HRESULT: 0x8007202F=
)
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at Quest.Avalanche.ClassLibrary.LiveEnvironment.LivePolicy.set_SecurityD=
escriptor(Byte[] value)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.LivePolicy.Import(Policy=
Data data)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.PolicyBase.Import(Backup=
backup, String migrationTable, XmlDocument xmlReport)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.PolicyBase.ImportInterna=
l(Backup backup, String migrationTable)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.VersionControllable.Impo=
rt(Backup backup, String migrationTable)
This is caused by the group policy manager service account not having ownership of the GPO, when you have setup the application with minimal security rights.
Launch Group Policy Management Console via GPMC.MSC and select the GPO you are having problems with and click on the delegation tab -> select advanced and change the owner to the service account.
You can check if it is a permissions issue by adding the service account to the Enterprise admins and deploying a GPO. If this works go through the quick start guide and confirm that you have met all the requirements for a minimal security rights configuration.
