General discussion

  • Creator
  • #2276558

    scripting dsadd


    by cjsm ·

    We have a batch file that creates 3 groups using dsadd, creates a lot of folders, then makes 16 folder permission assignments. (Not my idea, talk to QA.) The batch file works – mostly. Groups are created. Folders are created. The first time you run the file, for permissions, you get ERROR: No mapping between account names and security IDs was done. And it really hasn’t done any permissions changes.

    Wait 2-15 minutes, run again, get lots of errors about groups and folders already existing, and all permissions are correctly assigned to the correct folders.

    Okay, so it is a timing issue. Waiting for 10 minutes in the middle of a batch file seems rather pointless. We don’t want to split folder creation and permissions assignment – too easy to forget step 2. How can I force AD to update all DCs with the new security groups created by dsadd command?

All Comments

Viewing 0 reply threads