AGMP Service Account Uncotrolled GPO Permissions

[ericparrish]

After installing AGPM and trying to convert Uncontrolled GPO's to Controlled, the APPROVAL of the conversion fails due to the fact that the AGPM service account does not have "Edit settings, delete, modify security" permissions under the DELEGATION tabl of the GPO. How do I get the service account to be added into an Uncontrolled GPO with the above permissions by default so that it does not have to be done manually everytime someone creates an Uncontroleed GPO?

[jeremym]

It's in the AGPM 4 downloadable chapter. We use a PowerShell script to pre-add in the security within the GPO .. and .. whamo .. it's done. Download the AGPM chapter in this page (left side)
Extra eChapters | Group Policy Answers

Hope that helps !

[ericparrish]

When I run the script it tells me:

The term 'Set-GPPermissions' is not recognized as the name of a cmdlet, function, script file, or operable program. Che
ck the spelling of the name, or if a path was included, verify that the path is correct and try again.

In your book you run this from C:\Programdata\Microsoft\AGPM, but I get the same error if I run it from there as well.