Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Permissions on GPO

Posted on 2013-05-29
7
Medium Priority
?
354 Views
Last Modified: 2013-05-31
Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
0
Comment
Question by:oasisuk
7 Comments
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204391
0
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39204402
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
 
LVL 12

Expert Comment

by:Chris
ID: 39204403
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 

Author Comment

by:oasisuk
ID: 39204463
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39204502
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204504
0
 
LVL 5

Accepted Solution

by:
balmasri earned 1000 total points
ID: 39205998
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question