Solved

Give permission to someone to create GPO?

Posted on 2010-08-18
5
1,358 Views
Last Modified: 2012-05-10
Hi Experts,

I have an AD on server 2003. I created a 'Tech Admins' security group and added a person named 'Moon' to this group. I'd like give this group permission to create GPO only for 'Tech' OU. How do I do that?

Here is my domain structure from 'group policy management' console:
Group Policy Management
Forest: mycompany.org
  Domains
    mycompany.org
      IT
        Field
          Tech

Thanks.
0
Comment
Question by:SJCA
  • 2
  • 2
5 Comments
 
LVL 2

Assisted Solution

by:hydrokid
hydrokid earned 150 total points
ID: 33466555
Download the group policy management console from microsoft. (GPMC)
Open GPMC -> Click the OU you want to delegate -> On the result pane on the right, select the Delegation tab -> Click add to add the user or group you want to delegate permission to
0
 
LVL 1

Author Comment

by:SJCA
ID: 33466638
I clicked the 'Delegation' tab and then click 'Add' to add 'Tech Admins' group . It went fine but when the user 'Moon' log in and right click on 'Tech' OU, he still see the 'Create and Link a GPO Here...' greyed out, but everything else is fine. Any ideas?
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33466650
is the user a member of the Group Policy Creator Owners group ? if not, add then in addition to the delegation and that should work.
0
 
LVL 20

Accepted Solution

by:
woolnoir earned 350 total points
ID: 33466672
the same applies, to if its a GROUP you want to add obviously.
0
 
LVL 1

Author Closing Comment

by:SJCA
ID: 33755309
Thanks!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question