Bitlocker deployment through GPO

[Mingione]

Hello,

I read the following article on how to deploy a powershell script via GPO and “Scheduled Tasks”, very clear and well done:

Run PowerShell scripts as Immediate Scheduled Tasks with Group Policy

I replicated the configuration but the GPO doesn’t work in these points:

1) in the GPO in the section Computer Configuration -> Windows Settings -> Files
I copy a file from a network share (in DFS system) to local, and here I have already the first problem.
The file is not copied from the share, but I have no evidence of why. I say that the share is shared in everyone fullcontrol and also the permisions on the share and the file to copy are in everyone fullcontrol.

If instead I copy the file from the policy share :
\hostname.LOCAL\SysVol\hostname.LOCAL\Policies\{75C67D02-588E-464B-BCAD-B6AB9E1584D7}\Machine\Scripts\Startup
then it is copied.
I think it’s a permissions problem, but I can’t figure out why.

2) In the Tasks scheduled I created the task following your article, the task is executed by returning (0x0).
Even if the task has finished, the powershell script is not executed, or if it is executed it does not write a file in the share of the previouspoint.

Where am I going wrong?

3) In the windows eventview in the Applications section I have this warning :

Event 4098 , Group Policy Scheduled Tasks
Unable to apply the computer element “script” in the Group Policy object ‘name{}’.
Error code ‘0x80070005 Access Denied.’. Error cleared.

Many thanks for any feedback.
Best regards,

Diego M.

[Author]

Posts