Change permissions Domain Wide on %WinDir%

Use cacls (http://www.ss64.com/nt/cacls.html) in a script that you can put out in a GPO, and apply the permissions on the folders that you want...

i.e.

cacls c:\Windows /G <domain>\Everyone:C /C

I am receiving an invalid arguments error when trying the following on one of my machines from the command line.
cacls c:\windows /G oshq\authenticated users /C

you need to use "authenticated users" (in quotes)

Still a no go with cacls c:\windows /G oshq\"authenticated users" /C or cacls c:\windows /G "oshq\authenticated users" /C

Will this only work with single files or will it work with folders? I am looking at the site listed above and it is only referring to individual files. Thanks

Cacls does work for folders - you may need to use %windir% instead of c:\windows

Still not working, any ideas?

First of all - you need the permission you want to write, i.e. "oshq\authenticated users":R

R Read  
C Change (write)  
F Full Control  
P Change Permissions (special access)  
O Take Ownership (special access)  
X EXecute (special access)  
E REad (Special access)  
W Write (Special access)  
D Delete (Special access)