Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Whenever I try to access the Local Group Policy Editor (or access the local security Policy from the Administrative tools folder) I get the following message:

"Failed to open the Group Policy Object on this computer. You may not have appropriate rights.

Details: Unspecified Error"

Please can somebody suggest what the problem might be?

I have used a registry cleaner, which might have done the damage.


I am using Windows 7 Professional as the Administrator. The PC is freestanding - no domain controller.

Looked in the Administrative Events Log and found plenty of these:

Log Name:      System
Source:        Microsoft-Windows-GroupPolicy
Date:          28/05/2011 23:43:08
Event ID:      1096
Task Category: None
Level:         Error
User:          Study\The Administrator
Computer:      Study
The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object LocalGPO. Group Policy settings will not be resolved until this event is resolved. View the event details for more information on the file name and path that caused the failure.
Event Xml:
<Event xmlns="">
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <TimeCreated SystemTime="2011-05-28T22:43:08.750000000Z" />
    <Correlation ActivityID="{2B1F7048-0A0F-4367-AF18-DAA5F16B73A6}" />
    <Execution ProcessID="728" ThreadID="3040" />
    <Security UserID="S-1-5-21-2954353469-387026828-152714653-1014" />
    <Data Name="SupportInfo1">2</Data>
    <Data Name="SupportInfo2">1232</Data>
    <Data Name="ProcessingMode">2</Data>
    <Data Name="ProcessingTimeInMilliseconds">390</Data>
    <Data Name="ErrorCode">13</Data>
    <Data Name="ErrorDescription">The data is invalid. </Data>
    <Data Name="DCName">
    <Data Name="GPOCNName">LocalGPO</Data>
    <Data Name="FilePath">C:\Windows\System32\GroupPolicy\User\registry.pol</Data>

Also found loads of these, but don't know if this is relevant:

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          28/05/2011 23:37:36
Event ID:      10016
Task Category: None
Level:         Error
Keywords:      Classic
User:          NETWORK SERVICE
Computer:      Study
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
 and APPID 
 to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="">
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10016</EventID>
    <TimeCreated SystemTime="2011-05-28T22:37:36.000000000Z" />
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Security UserID="S-1-5-20" />
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}</Data>
    <Data Name="param5">{066FCC09-2096-4EEF-AA2F-353DB80F1BF8}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
share|improve this question

I deleted the machine GPO .pol file under c:\windows\system32\GroupPolicy\Machine

I had to show hidden files and folders first.

I rebooted and it recreated a new local policy. Now domain GPO policies apply without fail.

share|improve this answer
Thank you so much - this was close enough for me to fix it. The problem was fixed by deleting the .pol file in the user folder instead. What a relief! This has been messing up my computer for months. – Stephen Engineer Aug 15 '11 at 21:29
Thanks! This fixed the issue for me as well. – WhiteZero Jul 25 '12 at 20:21
This fixed my "issue" as well. – Mad Tom Vane Apr 21 '15 at 19:37
Worked for me, too. But the new .pol file was not created in my case. I was not able to open to the Local Security Policy app on server 2012, but now I can. Probably need to set up some policies again. – htm11h Jul 30 '15 at 12:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.