$Policies = Get-ChildItem C:\Windows\SYSVOL\domain\Policies -Name -Filter “{*}”
foreach ($Policy in $Policies) {
icacls “C:\Windows\SYSVOL\domain\Policies\$policy” /remove:g “<DomainName>\Domain Admins”
icacls “C:\Windows\SYSVOL\domain\Policies\$policy” /grant “<DomainName>\Domain Admins:(OI)(CI)(F)”
icacls “C:\Windows\SYSVOL\domain\Policies\$policy”
}
