Hello,\n\nWe've just completed a windows 2000 domain migration to windows 2008 R2. All\nour DC's are Win 2008 at this point. Our forest consists of one parent\ndomain and seven child domains. We are the point where we want to update\npermissions on all GPOs by using GrantPermissionOnAllGPOs.wsf script. The\nquestion is:\n\nShould this script be run once at the forest level? or run once for each\ndomain? or be run on every domain controller of every domain?\n\nThank you.\n\n\n\nThanks.