Attempted to perform an unauthorized operation.
The service account has Enterprise Admins permissions, and registrations of OUs are successfully.
This is an error attempting to set permissions on an object. The service account may not have the correct permissions to set security during registration.
Check that the minimum permissions required for the service account listed in the GPOADmin Quick Start Guide have been set correctly, specifically around the GPOcontainer, the GPOsecurity and GPOownership.
It is likely that even though the service account belongs to the Enterprise Admins group, it cannot set security / ownership on the GPO. In this case there could be a deny permission on the service account and/or the Enterprise Admins group.
In addition, it is possible that the GPO already has a non-default owner (i.e. the default owner is Domain Admins). If the owner has been changed, the service account will not be able to take ownership and setting security may fail.
