Return
-
Title
How to grant the GPOAdmin Service Account full rights to all GPOs in a domain -
Description
For proper functionality, it is recommended that the GPOADmin service account have ownership rights to all GPOs that will be managed through GPOADmin. Is there a way to grant this right to all of the GPOs? -
Resolution
GPOADmin provides a Powershell script that allows you to grant Edit settings, Delete, and Modify Security privileges and assigns ownership to all the GPOs in the specified domain.The script is called GPOADmin.AddServiceAccountToAllGPOs.ps1 and can be found in the following folder on the GPOADmin server:<installDrive>\Program Files\Quest\GPOADmin\ScriptsThe Syntax is:GPOADmin.AddServiceAccountToAllGPOs -Domain <string> -ServiceAccount <string>For Example:GPOADmin.AddServiceAccountToAllGPOs -Domain "MyDomain.com" -ServiceAccount "mydomain\Service Account"