RE: GrantPermissionOnAllGPOs.wsf

From: mbrunton (mbrunton_at_discussions.microsoft.com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 11:11:05 -0800

I tried to run it on our domain, but I get an error about the "Enterprise
Domain Controllers" group. I don't have that security group on our domain.

jswift - Do you have the Enterprise Domain Controllers group in your Active
Directory. I want to know if this is normal.

"jswift" wrote:

> I'm adding a new Windows 2003 DC to an existing Windows 2000 Domain as a
> beginning to the 2003 upgrade. After I install this 2003 DC to the domain
> (the W2K servers will still exist), do I need to run the
> GrantPermissionOnAllGPOs.wsf script on the 2003 box?
>
> Thanks.
>
> Jeff

Relevant Pages

  • Re: Installing Enterprise CA broke existing LDAP SSL on the DCs
    ... If you run certutil -dcinfo deleteBad it will drop all certs and request a ... an Enterprise CA was created on a member server for the ... A new group policy was created and linked to the Domain Controllers OU ... controllers via secure LDAP, and have been prompeted for a smart card. ...
    (microsoft.public.windows.server.active_directory)
  • Enterprise CA
    ... Reading some articles to keep my external OWA access secure, ... I have two Domain Controllers - one of them is a Enterprise Subordinate CA ... I've tried to use it as my Certificate Authority to validate external OWA ...
    (microsoft.public.win2000.security)
  • Re: understanding certificate autoenrollment
    ... I logged with a user account member of both Enterprise Admin & ... ENTERPRISE DOMAIN CONTROLLERS should have read and autoenroll, ...
    (microsoft.public.windows.server.active_directory)
  • RE: DCpromo error; Policy problem ??
    ... my default domain controllers policy. ... I called our entrprise admins to try the EA account in my ... >Enterprise Domain Controllers group is added as well. ...
    (microsoft.public.win2000.group_policy)
  • Re: AutoEnrollment DCs
    ... Did you add the Domain Controllers security group to the CERTSVC_DCOM_ACCESS ... certification authority, you must add the Domain Controllers security group. ... the server holding the certificate? ...
    (microsoft.public.windows.server.active_directory)