Scripting and Automating Custom Group Policy Delegation

by Derek Melber
Sept. 1, 2017 0 comments TechGenix Management windows client security

There are times when the Group Policy Management Console (GPMC) does not provide enough flexibility to get a large task done. In the case of establishing, modifying, or removing delegations to a large number of Group Policy Objects (GPOs), the GPMC can be a bit cumbersome. There is an alternative that is easy and free. The solution is to use the Microsoft GPMC scripts. These scripts have been around for quite some time and have been updated to support Windows Vista and Windows Server 2008. With these scripts, you can alter permissions on one or all GPOs with ease. Before you can start scripting and automating the delegation for GPOs, it is important to know what options you have. All of the delegations that are listed below can be set using the GPMC, but that approach can be time consuming. For GPO management, you have the following options