I dont know how or why it happened , but I have a new install of 2003 server. I went to click in domain controller security policy and domain security policy and its saying I dont have enough rights to view it. I am loged in under administrator. Is there a way to reverse this.

I wanted to add a litle more to this error: Failed to open Group policy Object. you may not have appropriate rights. Details: The specified domain either does not exist or could not be contacted. The the msc opens up with a red X next to group policy object editor. When I right click and go to help I get this as a possable problem When I try to edit a Group Policy object, I get the "Failed to open the Group Policy object" error. Cause: This usually is due to a networking problem, specifically, a problem with the domain name system (DNS) configuration. Solution: Verify that DNS is working properly. See also: DNS

Sounds like it's not so much a permission problem as a problem contacting the domain controller and this would indicate, as the error suggests, that it's a DNS issue. Do you have more than one DC? If so, be aware that group policy is focused on the PDC emulator. So the DC you are working one will need to be able to talk to the PDC emulator. Sounds like you may need to fix DNS. Good luck.

Yes it is a dns issue, but i messed that up real bad. I removed dns from the server role, the re added it , now when I click on dns it says dns server not available with a red x. Any suggestions.

I'd check in the Services section to see if the DNS service is started, disabled, or what. Re-adding the service back in should work for you. If the service is disabled, set it to automatic and reboot and see what happens.

yes it shows it is started, i stop it start it again and still nothing. i removed dns and readded again and still dead. Looks like reinstall 2003 again

Before doing all that...TS to the box.. (i am assuming of course you have a root domain and a single child off that root....) the box in question is the first DC that was brought up running all of your FSMO Roles on it (on child). once you TS to that box you will not have to worry about DNS per say for Domain Policies. You should be able to alter it as needed, however you may want to enable DNS if you have anyone else conencting to the box.. just a thought.... ;)