Group Policy Management : This security ID may not be assigned as the owner of this object.

Question

I attempted to create a Group Policy Object (GPO) within a Domain Controller using a Domain Admin account, which operates under an Enterprise Admin account.

As part of the configuration, I modified the Take Ownership of Files or Other Objects policy setting by adding the Domain Admins group under both the Default Domain Policy and Default Domain Controllers Policy. These policies were successfully applied to the servers.

However, when attempting to create the GPO, I encountered an error. I am looking for insights into potential causes and resolutions for this issue.

Answer 1

Hello

Thank you for posting in Q&A forum.

Please check if you have the same problem if you remove the Take Ownership of Files or Other Objects policy setting by adding the Domain Admins group under both the Default Domain Policy and Default Domain Controllers Policy.

If the problem disappears after you remove the Take Ownership of Files or Other Objects policy setting by adding the Domain Admins group under both the Default Domain Policy and Default Domain Controllers Policy, it may be caused by this GPO setting you configured.

If you must add the setting you mentioned. Because the default is Administrators, you can add the default Administrators and Domain Admins. Then check if it helps.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.