Solved

Delegating GPO edit/link/create rights to entire OU

Posted on 2010-09-01
3
687 Views
Last Modified: 2012-05-10
Hello,

I am wondering if it is possible to delegate edit/create/link etc rights to an entire OU.  Basically add a security group so the people in that security group can create/edit/link GPO's as needed, but only to specified OU.  I looked at the delegation tab, but no dice.    I know you can set it on actual Group Poilicy Objects themselves, just can't seem to find if it is possible to set permissions like that on OU's.

Thanks
0
Comment
Question by:Majestica
3 Comments
 
LVL 24

Accepted Solution

by:
Mike Thomas earned 500 total points
ID: 33575917
You can by selecting the advaced view in AD get to the security tab which would allow you define more permissions on an OU.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33575952
Exactly that way. MojoTech is right!
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33575982
refer below link for complete information

http://technet.microsoft.com/en-us/library/cc781991(WS.10).aspx
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now