Error: 'failed to save Domain\sysvol\domain\policies\Guid\machine\Microsoft\Windows\NT\SecEdit\GptTm (NETIQKB11517)

fact
NetIQ Group Policy Administrator 2.0

symptom
Error: 'failed to save Domain\sysvol\domain\policies\Guid\machine\Microsoft\Windows\NT\SecEdit\GptTmpl.inf' .

symptom
Error occurs when delegating GPO Management in NetIQ Group Policy Administrator.

cause
The above error message is caused because the NetIQ Group Policy Administrator (GPA) does not correctly set the ACLs on the policy directory in the Sysvol directory to include the delegated account.

fix

This issue has been corrected in NetIQ GPA version 3.0.  The latest version of NetIQ GPA can be downloaded by accessing the following link:

Download: NetIQ GPA (requires username and password)

To correct this error message in the NetIQ GPA 2.0, the user account must be explicitly granted full control over the policy directory and its subdirectory located under the Sysvol folder. (i.e C:\WINNT\SYSVOL\domain\Policies\{1B41C706-5E0B-416A-967A-2EF6F2CB3497})

 

Formerly known as NETIQKB11517