Im trying to move uncontrolled policies to controlled but I get [GPMC Error] Could not take ownership of the production GPO. Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) on all of them. Per the docs, my service account is a member of the "GPO Creator Owners" group and "Backup Operators" group. I have also given full control of the container the policies are in to the service account. I am able to create new controlled policies and deploy them.
In uncontrolled Tab i don't see AGPM arhive, reviewer, editor have any access and add, remove, properties and advanced options are grayeout.
I wonder how i propagate the permissions to existing GPOs.