-
タイトル
Access denied when editing workflow disabled GPO -
説明
When I edit a "workflow disabled" GPO, I receive the error "Access is denied" when launching the editor.
-
原因
With a workflow enabled GPO, GPO admin creates a working copy that has permissions granted by GPO Admin to edit accordingly.
With the workflow disabled GPO, when you launch GPEdit, you are connected to the live GPO in GPMC. Therefore you will only have permission if the user you are logged onto Windows as has permissions delegated natively as seen through GPMC. (By default this is Group Policy Creators, Domain Admins and Enterprise Admins).
-
対策
A work around for this if you require non workflow GPO is to use the run as feature when editing the GPO from GPO Admin, this would allow you to enter credentials to access the GPO accordingly from GPO Admin.