mbt masai
 
Welcome !
         

                                
After experiencing a lot of down time, We decided to move this site to CrystalTech.com. CrystalTech.com is powered by only the finest Windows servers providing the best performance, reliability, and value anywhere.

 Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply?

Author Message
sdm44990

  • Total Posts : 18
  • Scores: 0
  • Reward points : 0
  • Joined: 1/26/2007
  • Status: offline
Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply? Friday, February 12, 2010 9:34 PM (permalink)
0
The AD and GP cmdlets are very cool, however for the group policy there isn't an explicit deny apply.  Wondering if anyone has found a viable workaround to deny apply for groups within this specifc cmdlet?  Any help would be greatly appreciated!
-PermissionLevel <GPPermisssionType> Specifies the permission level to set for the security principal. The valid permission levels are: GpoRead, GpoApply, GpoEdit, GpoEditDeleteModifySecurity or None.

#1
    ebgreen

    • Total Posts : 8089
    • Scores: 95
    • Reward points : 0
    • Joined: 7/12/2005
    • Status: online
    Re:Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply? Sunday, February 14, 2010 4:26 AM (permalink)
    0
    I'm not sure what cmdlets you are talking about. Vanilla PS does not have AD or GP cmdlets.
    "... when you are good and crazy, oooh, oooh, oooh, the sky is the limit!" - The Tick
    Goog places to start:http://www.visualbasicscript.com/m_24727/tm.htm
    http://www.visualbasicscript.com/m_47117/tm.htm
    #2
      sdm44990

      • Total Posts : 18
      • Scores: 0
      • Reward points : 0
      • Joined: 1/26/2007
      • Status: offline
      Re:Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply? Sunday, February 14, 2010 8:04 AM (permalink)
      0
      Sorry, should have explained, the builtin functionality of Windows 2008 R2 has full support for Active Directory administration and group policy administative functionality.  The new framework for Active Directory Management Gateway Service:
      http://www.microsoft.com/downloads/details.aspx?FamilyID=008940c6-0296-4597-be3e-1d24c1cf0dda&displaylang=en
      Provides cmdlets to administer AD etc.  One of the group policy cmdlets "Set-GPPermissions" : http://technet.microsoft.com/en-us/library/ee461038.aspx
      Has almost all the functionality one could one, except the deny apply, and was wondering if anyone had found a viable workaround with the native cmdlets using R2 modules?
      #3
        sdm44990

        • Total Posts : 18
        • Scores: 0
        • Reward points : 0
        • Joined: 1/26/2007
        • Status: offline
        Re:Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply? Sunday, February 14, 2010 8:06 AM (permalink)
        0
        http://www.microsoft.com/downloads/details.aspx?FamilyID=008940c6-0296-4597-be3e-1d24c1cf0dda&displaylang=en
        Provides the communciation components for the AD cmdlets in R2 for 2003 and 2008 etc.  In R2 the cmdlets are installed when the services or RSAT is installed.
        #4
          sdm44990

          • Total Posts : 18
          • Scores: 0
          • Reward points : 0
          • Joined: 1/26/2007
          • Status: offline
          Re:Powershell V2 Group Policy cmdlets (set-gppermissions) question on deny apply? Sunday, February 14, 2010 10:25 AM (permalink)
          0
          Actually just found out you can use the -permissionlevel none to clear and then use -permissionlevel gpoedit, it will have the apply gpo unchecked, so in theory that should work out well.

          Thanks Charles for the help on that, didn't think about clearing the flag first then setting perms.
          #5

            Online Bookmarks Sharing: Share/Bookmark

            Jump to:

            Current active users

            There are 0 members and 1 guests.

            Icon Legend and Permission

            • New Messages
            • No New Messages
            • Hot Topic w/ New Messages
            • Hot Topic w/o New Messages
            • Locked w/ New Messages
            • Locked w/o New Messages
            • Read Message
            • Post New Thread
            • Reply to message
            • Post New Poll
            • Submit Vote
            • Post reward post
            • Delete my own posts
            • Delete my own threads
            • Rate post

            2000-2012 ASPPlayground.NET Forum Version 3.8
            mbt shoes www.wileywilson.com