Hello there, 

i am looking for the syntax to change owner in a security group with powershell 

thanks!

Hi,

Set-ADGroup cmdlet with -ManagedBy parameter.

• Proposed as answer by jrv 22 hours 17 minutes ago

I think Managedby and Owner (from security advanced) is not the same....

You're right, they are not the same. In that case it would be best to use Get-Acl to get acl, modify it, and than apply the change with Set-Acl.

• Edited by Adam W. Mrowicki 21 hours 46 minutes ago

yes i sad that is the command, just i need help with the syntax..i can not found any example with 

"security owner change"

This should work:

$group = [LDAP]...
$acl = Get-Acl $group
$acl.SetOwner([Security.Principal.NTaccount] "Domain\Login" )
Set-Acl -Path $group -AclObject $acl

ManagedBy controls who has the ability to change a group.  We do not set Owner on groups.  AD objects are owned by System  or Administrators Group and, on occasion, Account Operators.

Hi,

Set-ADGroup cmdlet with -ManagedBy parameter.

• Proposed as answer by jrv Tuesday, February 17, 2015 1:13 PM

You're right, they are not the same. In that case it would be best to use Get-Acl to get acl, modify it, and than apply the change with Set-Acl.

• Edited by Adam W. Mrowicki Tuesday, February 17, 2015 1:44 PM

This should work:

$group = [LDAP]...
$acl = Get-Acl $group
$acl.SetOwner([Security.Principal.NTaccount] "Domain\Login" )
Set-Acl -Path $group -AclObject $acl

• Marked as answer by Gustav032 47 minutes ago

This should work:

$group = [LDAP]...
$acl = Get-Acl $group
$acl.SetOwner([Security.Principal.NTaccount] "Domain\Login" )
Set-Acl -Path $group -AclObject $acl

• Marked as answer by Gustav032 Monday, February 23, 2015 10:46 AM

Oh thhanks, this works, but 

works for user account domains (contoso\useraccount)

if i want to change owner to a group administratos (contoso\administrators) 

i hace a error