The directory service can perform the requested operation...

[Tom Decaluwe]

Hi all,

I'm having a problem removing a GPO from my Active Directory. All i did was create a GPO and now i want to delete it. I go to the GPMC to the Group Policy Objects container > right click my GPO Delete > click ok on the " Do you want to delete this GPO..." but it does not delete the object, i get the popup:

"The Directory service can perform the requested operation only on a leaf object"

When i go to the Delegations tab is see Domain Admins have Edit / delete / modify security rights


Any idea's on what is going on? :roll:

cheerz

Tom Decaluwe

---------------

I have done somemore digging and found this:

when i run gpotool.exe it is telling me the GPC and GPT are in sync

============================================
Policy {B56436C2-6D7F-4FF6-BE14-1B1F795F8B5E}
Friendly name: BIS_USR_Software Distribution
Policy OK
============================================

but when i open the BIS_USR_Software Distribution in GPMC it's empty and when i go to the GPT i see there ar 4 AAS files in the user\application directory.

Is there a way to manually remove the GPC and GPT or any other steps i should take te remove this GPT seems simple enough but what about the GPC container?

What could cause this to happen?

[Tom Decaluwe]

Well it took me the better half of the day and some help from minasi.com but i was finally able to delete the gpo. I still don't know what caused the problem though.

The procedure i used:

1) download a little tool called CMDasSYS.exe off the http://assarbad.net/en/stuff in the localsystem.zip package

2) start this cmdasys.exe to open a cmd box running on system credentials on a DC (you could probably use AT ... too)

3) open mmc from the cmd box and add the AD users & computers snap-in

4) delete de GPO from this snap-in

5) wait for the delete to replicate

result was indeed that the GPO was deleted from one DC, a little while later from the other DC and the GPT entries where gone too


cheerz,

Tom Decaluwé