Solved

Delegating GPO edit/link/create rights to entire OU

Posted on 2010-09-01
3
684 Views
Last Modified: 2012-05-10
Hello,

I am wondering if it is possible to delegate edit/create/link etc rights to an entire OU.  Basically add a security group so the people in that security group can create/edit/link GPO's as needed, but only to specified OU.  I looked at the delegation tab, but no dice.    I know you can set it on actual Group Poilicy Objects themselves, just can't seem to find if it is possible to set permissions like that on OU's.

Thanks
0
Comment
Question by:Majestica
3 Comments
 
LVL 24

Accepted Solution

by:
MojoTech earned 500 total points
Comment Utility
You can by selecting the advaced view in AD get to the security tab which would allow you define more permissions on an OU.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
Comment Utility
Exactly that way. MojoTech is right!
0
 
LVL 4

Expert Comment

by:goyal_251
Comment Utility
refer below link for complete information

http://technet.microsoft.com/en-us/library/cc781991(WS.10).aspx
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now