active directory - What account permissions are necessary for a powershell script to have access to get-gporeport? -
i've written powershell script run periodically query particular gpo's, record them, , check them against predefined configuration, monitoring unauthorized changes.
i created windows task scheduler task run script, , run service account created purpose. when account set local admin, script works fine. when local admin role removed, script not populate .xml files gpo content.
i tested whether account has rights write files having them write them simple " add-content $filepath "foo" " , worked, rights issue doesn't appear stem whether account allowed write files. seems issue whether account allowed use get-gporeport cmdlet.
can suggest might going on here? or how fix it?
Comments
Post a Comment