Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 358
  • Last Modified:

Permissions on GPO

Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
0
oasisuk
Asked:
oasisuk
1 Solution
 
Subhashish LahaCommented:
0
 
Kent DyerIT Security Analyst SeniorCommented:
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
 
ChrisCommented:
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
oasisukAuthor Commented:
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
Subhashish LahaCommented:
0
 
balmasriCommented:
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now