Error Message: Failed to Open the Group Policy Object. Details: The Specified Network Password Is Not Correct (257568)


The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
This article was previously published under Q257568

SYMPTOMS

When you try to start any of the Active Directory tools or snap-ins, you may receive an error message that is similar to the following:
Failed to open the Group Policy Object.
Details: The specified network password is not correct.

CAUSE

This issue may occur if your Domain Name System (DNS) settings are not correctly configured to register DNS IP address information or search DNS for the Active Directory name.

RESOLUTION

To resolve this issue, edit your DNS settings:
  1. Click Start, point to Settings, and then click Control Panel.
  2. Double-click Network and Dial-up Connections.
  3. Double-click Local Area Connection, or your internal network adapter.
  4. Click Internet Protocol (TCP/IP), and then click Properties.
  5. In the Use the following DNS server addresses box, note the IP address in the Preferred DNS server box, and then make sure that it points to your local DNS server.

    Note This server must be able to handle Service (SRV) records. This is Microsoft DNS in Windows 2000 and BIND 8.12 and later. The SRV records indicate the server as an Active Directory domain controller and they include _LDAP for Lightweight Directory Access Protocol, _Kerberos for the default security protocol Kerberos, and _GC for global catalog. The DNS server may be this server or another on your network. Do not point this to the Internet Service Provider (ISP) because the entries for the local Active Directory do not reside on the ISP's DNS system. You can either set the ISP as the Alternate DNS Server or as a DNS forwarder in the DNS manager.
  6. Click Advanced, and then click the DNS tab.
  7. In the DNS server addresses, in order of use box, make sure that the IP address of your local DNS server is listed correctly.
  8. Click Append primary and connection specific DNS suffixes, and then click to select the Append parent suffixes of the primary DNS suffix check box.
  9. In the DNS suffix for this connection box, make sure that your Active Directory domain name is listed, and then click to select the Register this connection's addresses in DNS check box.
  10. Click OK to close the TCP/IP settings dialog boxes.
Modification Type:MinorLast Reviewed:4/22/2003
Keywords:kberrmsg kbprb KB257568
©2002 Microsoft Corporation. All rights reserved.