GPOs update

Hello,

We've just completed a windows 2000 domain migration to windows 2008 R2. All
our DC's are Win 2008 at this point. Our forest consists of one parent
domain and seven child domains. We are the point where we want to update
permissions on all GPOs by using GrantPermissionOnAllGPOs.wsf script. The
question is:

Should this script be run once at the forest level? or run once for each
domain? or be run on every domain controller of every domain?

Thank you.



Thanks.

Hello Raul,

If you talk about the Enterprise domain controllers read access you have
to update each domain in your forest including the root domain. See:
http://technet.microsoft.com/en-us/l...22(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> We've just completed a windows 2000 domain migration to windows 2008
> R2. All our DC's are Win 2008 at this point. Our forest consists of
> one parent domain and seven child domains. We are the point where we
> want to update permissions on all GPOs by using
> GrantPermissionOnAllGPOs.wsf script. The question is:
>
> Should this script be run once at the forest level? or run once for
> each domain? or be run on every domain controller of every domain?
>
> Thank you.
>
> Thanks.
>