- You are logged on to a Microsoft Windows Server 2003 Standard Edition-based computer as a domain administrator or as a local administrator.
- You run the Group Policy Results (GPResult.exe) command line tool.
- You have several Windows Server 2003 member servers that share the same organizational unit (OU).
When you perform a Resultant Set of Policy (RSoP) query, you may receive an error message that resembles the following:
Access is denied.
- To confirm if the user account has sufficient permissions at the NTFS level, the administrator can run the Procmon.exe tool from Sysinternals (http://technet.microsoft.com/en-en/sysinternals/bb896645) while the GPRESULT command is issued.
Monitor for any 'Access Denied' error messages being logged by Procmon while the administrator issues the GPRESULT command and use these to identify if the NTFS permissions are insufficient to complete the GPRESULT operation.
- Verify that the default permissions for the RSoP namespace are correct by using the WMI Control Microsoft Management Console (MMC) snap in.For more information about WMI namespaces security, click the following article number to view the article in the Microsoft Knowledge Base:
- If problems persist, troubleshoot the WMI service further. For more information about how to do this, visit the following Microsoft Web site: