Unable to access user policies on "server". access is denied.

[anbj23]

We have an OU with service accounts. When we rightclick one service account and choose copy, to copy this service account to the same OU we get the error message "Unable to access user policies on "dc in domain". Access is denied.
We have problems to understand what user policies we don't have access to

[missioncritical]

The 'Access is Denied' portion of the error is coming from Windows/AD, so chances are you have UAC turned on (which is normal and you should) and Windows is not granting full rights to your process. Always run Hyena 'As Administrator' to ensure that Windows gives your process full rights.

[anbj23]

Hi,

We have tried to run Hyena as "administrator", but we get the same error. What " user policies" could the error message refer to?

Br
Anders

[missioncritical]

When I refer to running 'As Administrator' I am referring to running the software under a member of the domain admins account (ie a member of the local administrators group of the domain), and then using whatever method is applicable to your version of Windows (typically shift right click on the shortcut) and selecting 'Run As Administrator' from the Windows shortcut menu. I want to make sure that is what you are doing vs. just running the application under an administrator account.

This error pops up from time to time and its due to the process not having full admin rights, usually because the account is a delegated account or is not granted all of the rights as needed by Windows to get the information we are getting. The error is being generated by a Microsoft API call and is not referring to any particular policy (the API call is named NetUserModalsGet).

You did not mention what version of Hyena you are using, but in Hyena v14.4 we added some additional steps to try to get this information a different way due to the number of support cases this problem was generating. Let me know what version of Hyena you are using.

Since we need this information, there is no workaround, as the error you are getting (Access Denied) cannot be circumvented.