Advanced Group Policy management and Service Account rights

Advanced Group Policy management and Service Account rights

I recently wrote that the Group Policy Management Console Sample Scripts could be used to grant the AGPM service account rights to all existing GPO’s.

Another way to do this if your running Windows 2008 R2, is to use the Group Policy cmdlets in windows PowerShell.

First you must import the Group Policy module with the command import-module grouppolicy

And then you will be able to use the cmdlet to grant the service account access, in this example the security group AGPM-Service will be granted full access.

Set-GPPermissions -All -TargetName “AGPM-Service” -TargetType Group -PermissionLevel GpoEditDeleteModifySecurity

image
We will achieve the same as we did with the old scripts but now with PowerShell  Smile

For a complete list of Group policy cmdlets see Group Policy Cmdlets in Windows PowerShell.

Table of Contents

Share this post
Search blog posts
Search
Authors
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

Cloud & Security Specialist, with a passion for all things Cybersecurity

Cloud and infrastructure security specialist with background in networking.

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly
Categories

Follow on SoMe