Resolution
fact
NetIQ Group Policy Administrator 3.0
symptom
Unable to export GPO to Active Directory in NetIQ Group Policy Administrator.
symptom
During cross-domain GPO migrations using the Repository?s migration feature, users need to map security principals of the two domains. If security mapping between domains are incomplete then exporting a migrated GPO produces an exception.
cause
The API that is used to verify the security permissions on GPO fails if the Group or Owner of GPO is not present.
fix
NetIQ Group Policy Administrator 3.0
symptom
Unable to export GPO to Active Directory in NetIQ Group Policy Administrator.
symptom
During cross-domain GPO migrations using the Repository?s migration feature, users need to map security principals of the two domains. If security mapping between domains are incomplete then exporting a migrated GPO produces an exception.
cause
The API that is used to verify the security permissions on GPO fails if the Group or Owner of GPO is not present.
fix
This issue is resolved with Hotfix Q26953B. To install this hotfix, run the GPA300000_HotfixQ26953B.exe file on the computers that have the GPA Consoles (MMC snap-ins) installed.
This hotfix modifies the following files on the computers that has the GPA Console:
- faADContainerInterface.dll
- faAdmin.dll
- faDBContainerInterface.dll
- fagpr.dll
- faGpReport.dll
- faGPRInterface.dll
- faPAnalysis.dll
- GpoSummary.rpt
- PolicyAuditing.dll
- SnapInEncapsulation.dll
- faGPRScrObj.dll
By default, these files are located in the C:\Program Files\NetIQ\Group Policy Administrator\Bin folder.
Additional Information
Formerly known as NETIQKB18525