Search This Blog

Monday, June 11, 2012

Advanced Group Policy Management

 

When working with Advanced Group policy management and using a service account, you need to give the service account rights to all existing GPO’s if you want to have them controlled by AGPM.

To do this easily you can download Group Policy management Console Sample Scripts.

image

Once downloaded and installed you can use the script GrantPermissionsOnAllGPOs.wsf.

In order to grant the service account (AGPM\svc.agpm) FullEdit access to all existing GPO’s you can use the command:

cscript "c:\Program Files (x86)\Microsoft Group Policy\GPMC Sample Scripts\GrantPermissionOnAllGPOs.wsf" "AGPM\svc-agpm" /Permission:FullEdit

image

Just not fun doing this on every GPO with the GUI Smile

No comments:

Post a Comment