戻る
-
タイトル
How to Run the powershell Script "GPOADmin.AddServiceAccountToAllGPOs.ps1" -
説明
As Part of the Minimum permissions guide the service request requires full delegation and ownership for each GPO:
- Using GPMC, delegate Edit settings, Delete, and Modify security to the service account for each existing GPO that will be managed by GPOADmin using GPMC.
- For each GPO managed by GPOADmin, verify that the Service Account has direct ownership of the GPO on the Owner tab of the Advanced Security Settings dialog box.
NOTE: This step can be automated after GPOADmin has been installed and configured using the GPOADmin.AddServiceAccountToALLGPOs.ps1 PowerShell script located in the Scripts directory of the install directory. -
対策
Resolution
- To run the script, browse to C:\program files\Quest\GPOAdmin\Scripts
- Right click "GPOADmin.AddServiceAccountToAllGPOs.ps1" and select edit (this will open powershell)
- type the following making sure its all on one line
.\GPOADmin.AddServiceAccountToAllGPOs.ps1 -Domain "domain.com" -ServiceAccount "domain\serviceaccount"
The result should show "Granting the service account" to all the GPOs available
You may also find GPOADmin.AddServiceAccountToAllGPOs.ps1 attached to this kb article. -
添付ファイル