Why am I seeing the error "Access Denied - 0x80070005" when creating a GPO using ADManager Plus?
Issue description
When creating a GPO using ADManager Plus, users receive the error message "Access is denied – 0x80070005." This prevents the successful creation of the GPO and can hinder the enforcement of critical policies across the Active Directory environment.
Possible causes
Insufficient permissions: The user lacks the necessary rights to create GPOs.
Group policy management console issues: Misconfigured delegation settings or console-related errors may block access and prevent GPO creation.
Prerequisites
Ensure the user account is either a member of the Group Policy Creator Owners group or has been explicitly delegated rights to create Group Policy Objects.
Resolution
Press Win + R, type dsa.msc, and press Enter to open Active Directory Users and Computers.
In the left pane, expand your domain and select the Users container.
In the right pane, find and right-click Group Policy Creator Owners, then choose Properties.
Go to the Members tab and click Add.
Enter the username of the account to be granted permissions, click OK, then Apply, and OK again to confirm.
After assigning the necessary permissions, try creating a GPO again to see if the issue is resolved.
Tips
Regularly review and update GPO-related permissions to prevent access issues and ensure compliance.
Grant only the necessary permissions to users to minimize security risks.
Keep domain settings and delegation rules updated to avoid permission conflicts and support smooth GPO management.
How to reach support
New to ADSelfService Plus?
Related Articles
Why am I seeing a "Permission Denied" error after delegating a role using ADManager Plus?
Issue description In ADManager Plus, a "Permission Denied" error may appear when a help desk technician or user tries to perform actions such as user creation or group modification, even though the role seems to be correctly assigned in the ...Failed to create Active Directory users using ADManager Plus due to an "Access Denied" error
Issue description When attempting to create a user in AD using ADManager Plus, the process may fail with an Access Denied error message. This error typically indicates insufficient permissions or delegation issues, preventing the successful addition ...Error code 80070005: Error in setting attributes, Access is denied.
Issue description Help desk technicians in ADManager Plus may encounter errors such as "Error code: 80070005: Error in setting attributes: Access is denied," when attempting to modify a user account. These errors indicate permission-related issues ...Error: Access denied for the provided shared path
Issue description Users may encounter the following error when executing schedule reports: Access denied for the provided shared path. This typically occurs due to insufficient permissions, incorrect path configurations, or network issues. Possible ...Failed to integrate an external application using ADManager Plus
Issue description ADManager Plus supports integration with external HCM, ITSM, SIEM applications and databases using APIs. This integration helps automate tasks in AD, such as user provisioning, deprovisioning, and updates, streamlining ...