-
Title
Error deploying a Group Policy Object (GPO) 0x8007202F. -
Description
When you deploy a GPO you get the following error:
Quest.Avalanche.Exceptions.AvalancheException: Error importing settings to =
object. ---> System.DirectoryServices.DirectoryServicesCOMException (0x8007=
202F): A constraint violation occurred. (Exception from HRESULT: 0x8007202F=
)
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at Quest.Avalanche.ClassLibrary.LiveEnvironment.LivePolicy.set_SecurityD=
escriptor(Byte[] value)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.LivePolicy.Import(Policy=
Data data)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.PolicyBase.Import(Backup=
backup, String migrationTable, XmlDocument xmlReport)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.PolicyBase.ImportInterna=
l(Backup backup, String migrationTable)
at Quest.Avalanche.ClassLibrary.LiveEnvironment.VersionControllable.Impo=
rt(Backup backup, String migrationTable) -
Cause
This is caused by the group policy manager service account not having ownership of the GPO, when you have setup the application with minimal security rights.
-
Resolution
Launch Group Policy Management Console via GPMC.MSC and select the GPO you are having problems with and click on the delegation tab -> select advanced and change the owner to the service account.
-
Additional Information
You can check if it is a permissions issue by adding the service account to the Enterprise admins and deploying a GPO. If this works go through the quick start guide and confirm that you have met all the requirements for a minimal security rights configuration.