JSI Tip 7813. When you open the Domain Security Policy (dompol.msc) or the Domain Controller Security Policy (dcpol.msc) from a CMD prompt, you receive 'You may not have appropriate rights'?

When you run dompol.msc or dcpol.msc from a command prompt, you receive:

Group Policy Error: Failed to open the Group Policy Object. You may not have appropriate rights.
Details: The specified domain either does not exist or could not be contacted.

To workaround this behavior, you must specify the appropriate GUID and domain name, as in:

Default Domain Controller Security Policy

dcpol.msc /gpobject:"LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=JSIINC,DC=COM"

Default Domain Security Policy

dompol.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=JSIINC,DC=COM"