Solved

Delegating GPO edit/link/create rights to entire OU

Posted on 2010-09-01
3
691 Views
Last Modified: 2012-05-10
Hello,

I am wondering if it is possible to delegate edit/create/link etc rights to an entire OU.  Basically add a security group so the people in that security group can create/edit/link GPO's as needed, but only to specified OU.  I looked at the delegation tab, but no dice.    I know you can set it on actual Group Poilicy Objects themselves, just can't seem to find if it is possible to set permissions like that on OU's.

Thanks
0
Comment
Question by:Majestica
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 24

Accepted Solution

by:
Mike Thomas earned 500 total points
ID: 33575917
You can by selecting the advaced view in AD get to the security tab which would allow you define more permissions on an OU.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33575952
Exactly that way. MojoTech is right!
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33575982
refer below link for complete information

http://technet.microsoft.com/en-us/library/cc781991(WS.10).aspx
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Migrate PKI into AWS - lift and shift. 1 50
Event ID 29 KDC Win 2008 R2 DC 6 18
GPO reset 2 42
Decommissioning DNS server question 3 30
Synchronize a new Active Directory domain with an existing Office 365 tenant
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question