[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 221
  • Last Modified:

specific full rights to users

hello I am perfmoring a migration from edir to ad. I need to find a wayto get full rights to a certain amout of users, but I am not able to have full rights to the ou as there are otehr users in that ou and the campous IT does not want to give those rights is there a way to do this? thanks
0
zenworksb
Asked:
zenworksb
  • 2
  • 2
1 Solution
 
Mike KlineCommented:
So right now you have an OU with a bunch of users in it.  Are you trying to get full control to only a subset of those users in that OU?
Can you create a child OU and move those users into that OU and give yourself full control of the child OU?
Thanks
Mike
0
 
bluntTonyCommented:
Specifically what rights do you mean?
If you're applying these with group policy (which your question suggests), you can create a group policy object with the required settings. Then create a security group to which you will add all the users you want to apply these settings to. Link the GPO to the OU holding all of the users, but on the 'Scope' tab for the GPO, remove 'Authenticated Users' from the Security Filtering section, and add just your new group.
Despite the GPO being linked to the OU, only the members of your security group will get the settings.
0
 
bluntTonyCommented:
I think I misunderstood the question... sorry.
0
 
zenworksbAuthor Commented:
no problem we can not create a sub ou as there ldap is setup to only point at the one ou is it possible to give full rights to a subset of users not at the ou level thanks guys
0
 
Mike KlineCommented:
No easy way that I know of.
If you go into one of those users and go to their security tab then advanced I'm guessing they have the following setting checked
"Allow inheritable permissions from the paret to propagate to this object and all child objects...."
So they are getting the setting from the OU.  You would have to uncheck that box then apply different security to the users in question.
 
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now