Hi, 

I am very new to the PowerShell world and was wonder in if anyone can help. 

I would like to bulk add the same user group to a multiple computer objects in a specific OU and set it to 'Allowed to Authenticate' permission, but I've not been able find any examples how this can be done or even if it can be done.  

If anyone can help that would great. 

Adam. 

Hi,

to grant the permission you can use dsacls, here an example

I don't get the other question though, do you want to grant a group the "allow to authenticate" right on a set of computers in a specific OU?

If that's the case you can use  Get-ADComputer with the SearchBase parameter and then iterate through it running dsacls for each object name.

TO apply permissions too objects in a container we apply the permission to the container and not to theobjects.

Also what you are trying to do will not work.

AD has a list on the user objects of the computers allowed.

http://windowsitpro.com/security/restricting-interactive-user-logons