GPO Deployment Failure Error Importing Settings to Object. (4372526)

GPO Deployment Failure Error Importing Settings to Object.

The following error is seen when trying to deploy a group policy:

"Error importing Settings to Object. An error occurred during the restore task, and the GPO CN={GUID},CN=Policies,CN=System,DC=Contoso,DC=corp ..."

Click To See Full Image.

When enabling debug logging and "Group Policy Management Console" Logging in verbose mode, then try to deploy GPO to reproduce the issue and as soon as this error happens again look through the gpmgmt.log and (or) gpmgmtmanagement.log located at :

C:\Users\<GPOADMIN Service Account ID>\AppData\Local\Temp

You see an access denied on a specific file when attempting to the GPMC import to deploy the GPO, this is an indication that the service account does not have full permissions through all files in the affected GPO's SYSVOL folders. For example, you see in the logs an error which shows that the process stops when it hits the file "\\Contoso.corp\SysVol\Contoso.corp\Policies\{GUID}\Machine\comment.cmtx" and exits with an access denied. 

Note that this is GPMC's comments file, this is separate from the comments fields in GPOADmin which are stored in the database, not in the GPO files. 

Missing permissions in SYSVOL.

• Even if the GPOADmin service account is listed with Edit settings, delete, modify security under delegation tab of the affected GPO remove the account and add it back with Edit settings, delete, modify security permissions. This will reapply permissions to make sure they are set correctly.
• Confirm that GPOADmin service account is listed as Owner of the affected GPO.
• Look through all of the files in this GPO's SYSVOL folders to look for items on which the service account does not have full permissions. Correcting the access errors should allow the GPO to deploy properly.