Windows 10: Unable to create GPO security objects per Microsoft TechNet article

Hi I am running Win 10 20h2 and Server 2016 in a AD forest with a couple of child domains.It has bee requested of me to lock down the App Sys and Sec Logs from some Admin accounts. I have been trying to add these entries below into Sceregvl.inf and run the regsvr32 scecli.dll as documented in the article in LInk 1 below and the objects do not show up in Domain GPO or Local GPO. I have also added the Registry entries manually with the correct SDDL in the string. I have also tried adding the statement in the INF file as described in Link2 I cannot get it to work.Please helpCKMACHINE\System\Curre

:)

 

"This security ID may not be assigned as the owner of this object", when trying to create GPO as Domain Admin

Hi,

Thank you for writing to Microsoft Community Forums

We understand your concern as you are unable to create a new GPO in the GPMC.

In this scenario, we would suggest you to post your query in
TechNet
forums, where we have experts and support professionals who are well equipped with the knowledge on GPO on Domain to assist you with the appropriate troubleshooting steps

However, there are couple of threads in TechNet Forums which I came across while researching for you query, which seems to be similar to your query.

Creating new GPO Windows 2008 R2:This security ID may not be assigned as the owner of this object

Folder redirection: This security ID may not be assigned as the owner of this object.

Regards,

Aditya Roy

Microsoft Community – Moderator

 

Microsoft Security Bulletin for September 2007

Microsoft released yesterday the September Security Bulletin for Windows operating system, as part of its monthly security cycle. This bulletin summary lists one critical and three important updates. For more information, see Microsoft Security Bulletin Summary for September 2007.

Source: Microsoft

 

"This security ID may not be assigned as the owner of this object", when trying to create GPO as Domain Admin

Hi,

I, and a couple of other members in our IT Team who are in the "Domain Administrators" group in active directory have been trying unsuccessfully to create a new GPO in the GPMC.

Delegation is set to allow Domain Admins to create a new GPO, but whenever we try, we're met with the message above; "This security ID may not be assigned as the owner of this object".

I've also tried to create a GPO using the default "Administrator" account on the Domain - unfortunately to no avail.

I've searched through multiple forums already, and have yet to find a solution.

Any help with this issue is thoroughly appreciated.

Thanks,

Harvey