"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt

When you try to open the Domain Security Policy console or the Domain Controller Security Policy console by running the dompol.msc command or the dcpol.msc command from the command prompt, you may receive the following error message:

This problem occurs because the dompol.msc command and the dcpol.msc command do not include the required domain name parameter and the required policy GUID parameter that the computer must bind to.

To resolve this problem, you must specify the domain name parameter and the policy GUID parameter that the computer must bind to. For example, to open the Default Domain Controllers Policy console in the example.com domain, type the following at the command prompt: To open the Default Domain Policy console in the example.com domain, type the following at the command prompt:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

In conjunction with Microsoft Windows Server 2003, Microsoft has released a new Group Policy management solution that unifies the management of policy settings. The Microsoft Group Policy Management Console (GPMC) provides a single solution for managing all Group Policy-related tasks.

For more information, visit the following Microsoft Web site: