When attempting to register a GPO (or multiple ones) created in GPMC the following error message is displayed: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Attempted to perform an unauthorized operation. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: Attempted to perform an unauthorized operation. at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath) at Quest.Avalanche.VersionControl.Workflow.VersionControlled.RegisterSQL(VersionControlContainer container, VersionControllable thing, String comment, Int32 initialMajorVersion, Boolean workflowEnabled) at Quest.Avalanche....).
原因
GPOADmin service account is missing delegation permissions on the object which is being registered.
解决办法
As per the Quick Start Guide, minimum permissions section, add the following rights: Using GPMC, delegate Edit settings, Delete, and Modify security to the service account for each existing GPO that will be managed by GPOADmin using GPMC.