Discussion Locked

scripting dsadd

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have a batch file that creates 3 groups using dsadd, creates a lot of folders, then makes 16 folder permission assignments. (Not my idea, talk to QA.) The batch file works - mostly. Groups are created. Folders are created. The first time you run the file, for permissions, you get ERROR: No mapping between account names and security IDs was done. And it really hasn't done any permissions changes.

Wait 2-15 minutes, run again, get lots of errors about groups and folders already existing, and all permissions are correctly assigned to the correct folders.

Okay, so it is a timing issue. Waiting for 10 minutes in the middle of a batch file seems rather pointless. We don't want to split folder creation and permissions assignment - too easy to forget step 2. How can I force AD to update all DCs with the new security groups created by dsadd command?

1 reply

This discussion is closed to new replies.