Resolution
Group Policy Administrator 3.0
symptom
Add Repository Users' is grayed out even though I have Security Administrator role in SQL.
cause
NetIQ Group Policy Administrator looks to see if the user who is trying to Add Repository User has the System Administrator role on the SQL server.
fix
This issue is addressed in NetIQ Group Policy Administrator 3.00 Hotfix Q26953B. The hotfix is available for download from our website at:
https://www.netiq.com/support/gpa/hotfixes.asp
With the hotfix applied, NetIQ GPA will look to see if the user has Security Administrator role in SQL to enable the Add Repository User menu item.
Note: This is a cumulative hotfix which also includes fixes for Hotfix 17335. Applying this hotfix will also apply hotfix 17335.
This hotfix corrects the following issues:
When performing a Repository Export operation, some of the SYSVOL GPO folders and files have a "Date created" attribute incorrectly set.
Generating a difference report for two GPOs in different domains but with the same CN name was generating an incorrect report.
On export of GPOs that were migrated from a different domain, the CN name was displayed in lowercase instead of standard uppercase format.
On export of certain Repository GPOs, the security inheritance flag was enabled but the permissions were not inherited on some of the subfolders.
When checking out a GPO on a Windows 2003 server, users could not edit the Software Restriction Policy.
In the Connect to SQL server dialog, users could select, but not type in, long names.
This hotfix provides several important additions for GPA:
The algorithm for GPO Export operations from the Repository has been optimized to reduce the number of delete operations done on the SYSVOL folders. This optimization would help overcome Windows NT File Replication Service (NTFRS) limitations on quick deletes and recreation of files and folders that could cause NTFRS replication issues.
The domain-mapping feature in the GPO Migration Wizard has been updated to include folder-mapping. This is useful when users want to migrate GPOs that contain software packages or folder redirection settings. In such scenarios, administrators can use the folder mapping feature to specify the source and target shared folders between two domains.
The Repository root node now displays the current user context under which the application is being used.
The name of the domain controller (DC) to which the GPO would be exported is now displayed in the Export confirmation window.
When the Repository console is launched, the Repository operation for each doma.
in defaults to the PDC.
.