Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Updating GPOADmin permissions to remove service account from Domain Admins.
Description
When changing an established GPOAdmin environment to use a Minimum Permission account, existing GPOs need to be re-deployed as showing as having Unauthorized Modification.
How can this be corrected?
Cause
This is expected comportment as the process mentioned is supposed to be run during the original setup.
Resolution
Workaround
It is possible to automate an incorporate action using the PowerShell Cmdlets for GPOADmin.
This can allow for a script to get all non-compliant items and then set them to incorporate which will correct the issue without an additional deployment.
Please see the Documentation on the PowerShell scripts for details of the Cmdlets available.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
GPOADmin
5.21, 5.20, 5.19, 5.18
Topic(s):
How To
Article History:
Created on: 10/4/2016 Last Update on: 9/24/2025
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
Search All Articles
IE 8, 9, & 10 No longer supported
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.
