Unable to export GPO with an account that is not a domain administrator. (NETIQKB55482)

fact
NetIQ Group Policy Administrator 5.0

symptom
Unable to export GPO with an account that is not a domain administrator.

symptom
GPO export failed: 'Unable to copy child objects of the GPO.'

cause
The console user does not have permission to change the security descriptor on the GPO.

fix

Hotfix 55482 corrects an issue with Group Policy Administrator where user accounts that are not Domain Administrators cannot export GPOs from the GP Repository to Active Directory. This hotfix resolves this issue so that Group Policy Administrator users who are not Domain Administrators can export GPOs to Active Directory from the GP Repository.

To install this hotfix, perform the following steps on each Group Policy Administrator Console computer:

1. Close all Group Policy Administrator user interfaces.
2. Run the GPA50000_Hotfix55482.exe file.

This hotfix modifies the faADContainerInterface.dll file. By default, Group Policy Administrator installs this file in the Program Files\NetIQ\Group Policy Administrator\Bin folder.

For more information contact NetIQ Technical Support at www.netiq.com/support.

Formerly known as NETIQKB55482