This is a weird one on a 2008R2 domain. I login to the domain with a normal user account. I can elevate to launch gpmc.msc as a domain admin, but I get permission issues when trying to add a something to sysvol. For these reasons, it is usually just easier to remote into a DC and run gpmc.msc as a domain admin.
I have noticed that if I remote into a DC and launch gpmc.msc(while pointing gpmc to the local DC that I am also logged into) that I get permission denied when trying to copy scripts into the startup folder, etc. The weird thing is if I point gpmc.msc to any other DC(does not have to be the PDC emulator) and do the exact same thing, it will allow me to copy the file in. I have seen this on multiple DCs and have disabled AV, etc. Anyone have any ideas on why gpmc.msc must be pointed to a different DC to give me the permissions to copy some files into the sysvol location of a GPO? At first I thought I had some sysvol permission issues, but now it seems to be something else.
Thanks,
Dave