Link to home
Start Free TrialLog in
Avatar of oasisuk
oasisuk

asked on

Permissions on GPO

Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
Avatar of Subhashish Laha
Subhashish Laha
Flag of India image

Avatar of Kent Dyer
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
Avatar of oasisuk
oasisuk

ASKER

that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
ASKER CERTIFIED SOLUTION
Avatar of Bassam Almasri
Bassam Almasri
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial