GPO changes in the GP Repository do not generate email notifications. (NETIQKB48452)

fact
NetIQ Group Policy Administrator 4.6

symptom
GPO changes in the GP Repository do not generate email notifications.

symptom
E-Mail notification is not working.

fix

This may be due to SQL database roles that are overriding the permissions needed to generate email notifications. Deactivating the SQL database roles may resolve the issue. The SQL database roles are:

• db_denydatawriter
• db_denydatareader

To deactivate the SQL database roles:

1. Start SQL Enterprise Manager on the SQL Server computer with the GP Repository database.
2. In the left pane, navigate to Security\Logins.
3. In the right pane, click the account you are using for the GPA Export Override account.
4. On the Action menu, click Properties.
5. Click the Database Access tab.
6. In th elist of databases, click the GPO_REPOSITORY database.
7. In the list of database roles, confirm that the db_denydatareader and db_denydatawriter roles are not selected.

According to Microsoft, these roles deny permissions granted by other database roles.

Formerly known as NETIQKB48452