Advanced Group Policy Management

Advanced Group Policy Management

 

When working with Advanced Group policy management and using a service account, you need to give the service account rights to all existing GPO’s if you want to have them controlled by AGPM.

To do this easily you can download Group Policy management Console Sample Scripts.

image

Once downloaded and installed you can use the script GrantPermissionsOnAllGPOs.wsf.

In order to grant the service account (AGPMsvc.agpm) FullEdit access to all existing GPO’s you can use the command:

cscript “c:Program Files (x86)Microsoft Group PolicyGPMC Sample ScriptsGrantPermissionOnAllGPOs.wsf” “AGPMsvc-agpm” /Permission:FullEdit

image

Just not fun doing this on every GPO with the GUI Smile

Table of Contents

Share this post
Search blog posts
Authors
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Windows Client management & security.

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly
Categories

Follow on SoMe