Cannot export a Group Policy Object using the Export Override feature. (NETIQKB53814)

  • 7753814
  • 02-Feb-2007
  • 30-Aug-2007

Resolution

fact
NetIQ Group Policy Administrator 5.0

symptom
Cannot export a Group Policy Object using the Export Override feature.

symptom
Error: 'The server process could not be started because the configured identity is incorrect. Check the username and password.'

symptom
Error: 'Export service account unable to connect to the repository server or was unable to access the local GPOs folder.'

cause
The GPR server COM+ identity does not have the required permissions in the GPA_Repository database to perform the export override function.

fix

To grant the account used for the Com+ identity db_owner rights to the GPA_Repository database:

  1. Click Start > Programs > Administrative Tools> Component Services.
  2. Right-click GPR Server V5> Properties.
  3. Select the Identity tab to see the name of the configured account.
  4. In SQL Enterprise Manager, expand Databases > GPO_Repository.
  5. Right-click GPO_Repository> New > Database User.
  6. Add the account used for the COM+ identity.
  7. Select Roles under the GPO_Repository database node.
  8. Add the GPA security account to the db_owner role.
  9. Click OK.


note

If you use a domain account for the Com+ account, it also needs to have the Log on as a batch job privilege set in a Group Policy Object, or when the Active Directory performs an update, the identity of the COM+ package is reset, and the permission is removed, which will result in exports failing when using the export override account.

For more information, see the Microsoft Knowledge Base article: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q312497



Additional Information

Formerly known as NETIQKB53814

Feedback service temporarily unavailable. For content questions or problems, please contact Support.