"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt (832214)

The information in this article applies to:

Microsoft Windows Server 2003, Enterprise Edition
Microsoft Windows Server 2003, Standard Edition
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server

SYMPTOMS

When you try to open the Domain Security Policy console or the Domain Controller Security Policy console by running the dompol.msc command or the dcpol.msc command from the command prompt, you may receive the following error message:

Group Policy Error: Failed to open the Group Policy Object. You may not have appropriate rights.
Details: The specified domain either does not exist or could not be contacted.

CAUSE

This problem occurs because the dompol.msc command and the dcpol.msc command do not include the required domain name parameter and the required policy GUID parameter that the computer must bind to.

RESOLUTION

To resolve this problem, you must specify the domain name parameter and the policy GUID parameter that the computer must bind to. For example, to open the Default Domain Controllers Policy console in the example.com domain, type the following at the command prompt:

dcpol.msc /gpobject:"LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=example,DC=com"

To open the Default Domain Policy console in the example.com domain, type the following at the command prompt:

dompol.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=example,DC=com"

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

MORE INFORMATION

In conjunction with Microsoft Windows Server 2003, Microsoft has released a new Group Policy management solution that unifies the management of policy settings. The Microsoft Group Policy Management Console (GPMC) provides a single solution for managing all Group Policy-related tasks.

For more information, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

Modification Type:	Major	Last Reviewed:	9/3/2004
Keywords:	kberrmsg kbwinservperf kbMgmtServices kbfix kbprb KB832214 kbAudITPRO