Avatar of waltforbes
waltforbesFlag for Bahamas asked on

What command or script can apply a set of permissions to all computer accounts in a domain?

Points of My Scenario:


1. My domain A has a selective, cross-forest trust with domain B (A trusts B).


2. I enable users in domain B to logon to Windows hosts in domain A by granting domain-B\Domain Users group the "Read" and "Allowed to authenticate" permissions on domain-A's computer accounts.


3. I need to configure the above permission on all computer accounts in domain A (hundreds of computer accounts).


QUESTION: What command or script can I use to set such permissions on all computer accounts in Domain A?


Windows OSActive Directory* commandlinePowershell

Avatar of undefined
Last Comment
waltforbes

8/22/2022 - Mon
Michael Pfister

Grant the permission to the OU where the computer accounts are located. Inheritance will enable it to all computer accounts below
ASKER
waltforbes

Sadly, the "Allowed to authenticate" permission is not available for the OU object. It seems only available for the computer object.
ASKER CERTIFIED SOLUTION
Michael Pfister

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
waltforbes

OMG! EUREKA! I found it --- AND --- it works!! I applied it at the top level computer OU object, and it was inherited by the member servers in the OU tree! Many thanks Pfister. You've just made life much more pleasant for me! Lol!
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes