Troubleshooting.

  • If 'Access Denied - 80070005' error occurs while creating a new GPO , ensure that the user account configured in the domain settings has the necessary rights to create GPO in the desired domain.

  • Recommendation: As a best practice, ensure that the account with which the ADManager Plus runs has the necessary rights to create GPO in the desired domain.

  • In case of a 'Network access is denied - 80070041' error, perform the following actions in the machine where ADManager Plus is installed:
    • Run gpedit.msc.
    • Go to Computer --> Administrative Templates --> Network --> Network Provider --> Hardened UNC Paths.
    • Choose'Enabled'.
    • Under 'Options', click 'Show'.
    • Under 'Value name', enter "\\*\SYSVOL" (without quotes).
    • Under 'Value', enter "RequireMutualAuthentication=0, RequireIntegrity=0, RequirePrivacy=0" (without quotes).
    • Click OK to apply the changes.
    • Open command prompt and run gpupdate /force to apply the changes made.

  • If "Unable to retrieve the registry setting" error occurs, change that registry setting to "Not configured" using GPMC. You will then be able to display or modify the registry setting using AD Manager Plus. (This error occurs because of the difference in admx files available in GPMC and AD Manager Plus for that particular registry setting.)