zenworksb
asked on
specific full rights to users
hello I am perfmoring a migration from edir to ad. I need to find a wayto get full rights to a certain amout of users, but I am not able to have full rights to the ou as there are otehr users in that ou and the campous IT does not want to give those rights is there a way to do this? thanks
Specifically what rights do you mean?
If you're applying these with group policy (which your question suggests), you can create a group policy object with the required settings. Then create a security group to which you will add all the users you want to apply these settings to. Link the GPO to the OU holding all of the users, but on the 'Scope' tab for the GPO, remove 'Authenticated Users' from the Security Filtering section, and add just your new group.
Despite the GPO being linked to the OU, only the members of your security group will get the settings.
If you're applying these with group policy (which your question suggests), you can create a group policy object with the required settings. Then create a security group to which you will add all the users you want to apply these settings to. Link the GPO to the OU holding all of the users, but on the 'Scope' tab for the GPO, remove 'Authenticated Users' from the Security Filtering section, and add just your new group.
Despite the GPO being linked to the OU, only the members of your security group will get the settings.
I think I misunderstood the question... sorry.
ASKER
no problem we can not create a sub ou as there ldap is setup to only point at the one ou is it possible to give full rights to a subset of users not at the ou level thanks guys
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Can you create a child OU and move those users into that OU and give yourself full control of the child OU?
Thanks
Mike