Why am I seeing the error "Access Denied - 0x80070005" when creating a GPO using ADManager Plus?

Last updated on:

In this article:

Issue description

When creating a GPO using ADManager Plus, users receive the error message "Access is denied – 0x80070005." This prevents the successful creation of the GPO and can hinder the enforcement of critical policies across the Active Directory environment.

Possible causes

  1. Insufficient permissions: The user lacks the necessary rights to create GPOs.
  2. Group policy management console issues: Misconfigured delegation settings or console-related errors may block access and prevent GPO creation.

Prerequisites

Ensure the user account is either a member of the Group Policy Creator Owners group or has been explicitly delegated rights to create Group Policy Objects.

Resolution

  1. Press Win + R, type dsa.msc, and press Enter to open Active Directory Users and Computers.
  2. In the left pane, expand your domain and select the Users container.
  3. In the right pane, find and right-click Group Policy Creator Owners, then choose Properties.
  4. Go to the Members tab and click Add.
  5. Enter the username of the account to be granted permissions, click OK, then Apply, and OK again to confirm.

After assigning the necessary permissions, try creating a GPO again to see if the issue is resolved.

Tips

  • Regularly review and update GPO-related permissions to prevent access issues and ensure compliance.
  • Grant only the necessary permissions to users to minimize security risks.
  • Keep domain settings and delegation rules updated to avoid permission conflicts and support smooth GPO management.

How to reach support

If the issue persists, contact our support team here.