Advanced Group Policy Management

Advanced Group Policy Management


When working with Advanced Group policy management and using a service account, you need to give the service account rights to all existing GPO’s if you want to have them controlled by AGPM.

To do this easily you can download Group Policy management Console Sample Scripts.


Once downloaded and installed you can use the script GrantPermissionsOnAllGPOs.wsf.

In order to grant the service account (AGPMsvc.agpm) FullEdit access to all existing GPO’s you can use the command:

cscript “c:Program Files (x86)Microsoft Group PolicyGPMC Sample ScriptsGrantPermissionOnAllGPOs.wsf” “AGPMsvc-agpm” /Permission:FullEdit


Just not fun doing this on every GPO with the GUI Smile

Table of Contents

Share this post
Search blog posts
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

Cloud & Security Specialist, with a passion for all things Cybersecurity

Cloud and infrastructure security specialist with background in networking.

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly

Follow on SoMe