Return
-
Title
Access Denied when editing a GPO -
Description
When logged onto Windows as a normal user (Non GPOAdmin user), the following issue occurs:
1. Open GPOAdmin, and you will be prompted for credentials.
2. Enter GPOAdmin user credentials.
3. When trying to edit a GPO, you will get "Access Denied".
-
Cause
When launching GPEdit, GPOAdmin uses the credentials of the Windows session, not the credentials entered in GPOADmin.
-
Resolution
WORKAROUND 1:
Select the Run as... drop down to edit the GPO and enter the GPOAdmin logon credentials again.
WORKAROUND 2:
Shift+right click on the GPOAdmin shortcut and select Run as different user and enter the GPOAdmin user credentials.
-
Additional Information
If GPOADmin client is installed on a server in one domain and connected to the GPOADdmin server in another domain, this access denied may occur as the "edit" of the GPO is using the credentials of the user from the client to run the edit on the remote server. If the user does not have access to edit GPOs on the remote server, an access denied will occur.