Solved

Permissions on GPO

Posted on 2013-05-29
7
345 Views
Last Modified: 2013-05-31
Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
0
Comment
Question by:oasisuk
7 Comments
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204391
0
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39204402
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
 
LVL 12

Expert Comment

by:Chris
ID: 39204403
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

 

Author Comment

by:oasisuk
ID: 39204463
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39204502
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204504
0
 
LVL 5

Accepted Solution

by:
balmasri earned 500 total points
ID: 39205998
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now