JSI Tip 7813. When you open the Domain Security Policy (dompol.msc) or the Domain Controller Security Policy (dcpol.msc) from a CMD prompt, you receive 'You may not have appropriate rights'?

When you run dompol.msc or dcpol.msc from a command prompt, you receive:

Group Policy Error: Failed to open the Group Policy Object. You may not have appropriate rights.
Details: The specified domain either does not exist or could not be contacted.

To workaround this behavior, you must specify the appropriate GUID and domain name, as in:

Default Domain Controller Security Policy

dcpol.msc /gpobject:"LDAP://CN=\{6AC1786C-016F-11D2-945F-00C04fB984F9\},CN=Policies,CN=System,DC=JSIINC,DC=COM"

Default Domain Security Policy

dompol.msc /gpobject:"LDAP://CN=\{31B2F340-016D-11D2-945F-00C04FB984F9\},CN=Policies,CN=System,DC=JSIINC,DC=COM"

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.