Permissions on GPO

Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
oasisukAsked:
Who is Participating?
 
balmasriConnect With a Mentor Commented:
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0
 
Subhashish LahaCommented:
0
 
Kent DyerIT Security Analyst SeniorCommented:
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
ChrisCommented:
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
 
oasisukAuthor Commented:
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
Subhashish LahaCommented:
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.