An error occurs when exporting a Group Policy Object to Active Directory. (NETIQKB28252)

fact
Group Policy Administrator 3.0

fact
NetIQ Group Policy Administrator 4.0

fact
NetIQ Group Policy Administrator 4.5

fact
NetIQ Group Policy Administrator 4.6

fact
NetIQ Group Policy Administrator 5.0

symptom
An error occurs when exporting a Group Policy Object to Active Directory.

symptom
Error: 'GPO cannot be exported as you do not have modify rights on the GPO Security Filters.'

cause
The cause is the user may not have adequate permissions in AD to export the GPO.

fix

To resolve this error, perform the following steps:

1. Select the Group Policy Object (GPO) under GP Repository > Repository Server >Domain> Category.
2. Check out the GPO.
3. Right-click the GPO and select Properties.
4. Select the Security tab.
5. Click Advanced, and then select Add on the Permissions tab.
6. Select the user or group performing the Export to AD operation.
7. Check Allow for all permissions exceptApply Group Policy and All Extended Rights.
8. Click OK.
9. Click OK, and then click OK again.
10. Check in the GPO.

After performing the above steps the user will be able to export the GPO to AD.

 

note

The user must also have the following permissions to successfully Export a GPO to Active Directory (AD) if the GPO does not already exist in AD:

• Export to AD permission in the domain node.
• Modify Export Status permission in GPO node
• Create GPO (at least GPO Creator/Owner membership) & Link GPO to AD object

Formerly known as NETIQKB28252