Provide ACL right throug GPO for all user objects

Hi,

I've very specific problem for the customer. Problem is identified on thisURL. I have tested solution based on Scenario 2 - Method 2 (with Delegate Control) and it works perfect for whole domain users account where OU rights aren't blocked from previous OU. But, when one sub-OU had stopped inheritance permission, for that sub-OU Delegate control doesn't work.

So, I'm planning to assign GPO for whole domain, force this GPO and setup: apply GPO for user objects, and add on them Permission for Terminal Server License group and assign "Read and Write Terminal Server license server" attributes. Can you please advice how to do this?

Thnx.