Solved

Permissions on GPO

Posted on 2013-05-29
7
351 Views
Last Modified: 2013-05-31
Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
0
Comment
Question by:oasisuk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204391
0
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39204402
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
 
LVL 12

Expert Comment

by:Chris
ID: 39204403
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:oasisuk
ID: 39204463
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39204502
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204504
0
 
LVL 5

Accepted Solution

by:
balmasri earned 500 total points
ID: 39205998
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question