AGPM Least Privilege for Child Domain

Michael has covered “least privilege” for AGPM before (the Active Directory team followed up with a bit more detail). However, those scenarios are for single-domains. What if you have a forest where you want to manage all the child domains using AGPM, but you don’t want to just give the AGPM service administrator privileges across…


Tales from the Community – Deleting a registry value

Tales from the Community – Deleting registry values Okay, I’ve seen this question in the Technet Forums that basically goes like this: “Hey I have this reg script that deletes a value off the registry for me. The .reg file does [HKEY_CLASSES_ROOT\.ext\someApplication\ShellNew] “FileName”=-   – can I do that with an ADM template? All I…