Return
-
Title
Error when creating a GPO: "Failed to create the working copy.. Access is denied" -
Description
The below error may occur when creating a GPO:
"Quest.Avalanche.Exceptions.AvalancheActionException: Failed to create the working copy. ---> System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at Quest.Avalanche.Interops.GpmGmt.GPMDomainClass.CreateGPO()"
-
Cause
The service account does not have the appropriate permissions. -
Resolution
Verify that the service account is either a domain admin or has all the permissions outlined in the minimum permissions article, which can be found in the Quick Start Guide:
-
Additional Information
To verify if the issue is permissions related, grant the service account Domain Admin and restart the service and then attempt to create the GPO. Alternatively change the service account to a domain admin. If following the minimum permissions guide and still having an issue add the service account to the "Group Policy Creator Owners" group and then restart the GPOADmin service.