NqGPASyncLinkOrder tool does not correctly synchronize the link order (NETIQKB71338)

The NqGPASyncLinkOrder tool does not correctly synchronize the link order when you use a user account with GPO Editor permissions.

When you add domain users with the GPO Editor permission to the GP Repository, the NQGPASyncLinkOrder tool does not correctly synchronize the GPOs in the GP Repository that have more than one link to an OU in Active Directory.

To resolve this issue, provide the Execute permission to the user account for the following stored procedures available on the GPO_REPOSITORY database:

• gpa_rep_get_som_object_links
• fa_rep_getGPRPath
• gpa_rep_update_gpo_link_order
• gpa_rep_updateBIflaginSOMInfo

Steps:

1. Open Microsoft SQL Server Management Studio and connect to your SQL Server.
2. Expand the Databases node to the connection to the SQL Server.
3. Select and expand the GPO_REPOSITORY database.
4. Expand the Programmability node and select Stored Procedures.
5. Select one of the stored procedures available in the preceding list.
6. On the Action Menu, click Properties.
7. Click Permissions in the left pane.
8. Add the domain user and select the Execute permission in the Grant column.
9. Click OK.
10. Repeat steps 5 through 10 for all stored procedures in the preceding list.

 

The user does not have the right permissions on the particular stored procedure that updates the link order in the database. Sometimes, the user has permissions to update one OU but not another OU.

Formerly known as NETIQKB71338