panha_chea

I also have test another way. First I promote one PC to be a domain controller (for new domain), and I go to Active Directory to create Group Policy Object for an OU, it works properly without any errors. After that I remove Active Directory from that PC and I try to make it as BDC for my PDC. Now it is also get the error as the PDC. It get the Access Denied error too.

thank you Klasika and CrescendoBeat. I can resolve the problem by http://support.microsoft.com/default.aspx?...kb;en-us;842933 but the Access Denied Error when I create group policy can not be solved. I renamed the adminPtcComputer account back to "Administrator" and I have no IIS on my PDC. I checked the permission of domain policy folder {6AC1786C-016F-11D2-945F-00C04fB984F9} in the sysvol, the Administrator account, Administrators group have full contorl permission. The only thing I do on policy is configure the "Password must meet complexity" and "Minimum Password Length". I configure it back to undefined but it stay the same. I have never install program on my PDC except the McAfee anti-virus.

I can edit the Default Group Policy for the domain but before I can do it displays many message as in the picture. I checked the security group Administrators my account is still the member of it. I just disable the policy "Password must meet the complexity" and rename "Administrator" built-in account to adminPtcComputer.

Hello I have an AD for my domain. But when I create a Group Policy Object for an OU, I always get Access Denied error message even I log as administrator. I am sure that I log as administrator. I can not find the solution. You help is strongly appreciated Thank you