oasisuk
asked on
Permissions on GPO
Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
I think this is what you are looking for... Have a look at the answer.
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/
HTH,
Kent
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/
HTH,
Kent
The above link only allows you to delegate permissions to a specific GPO.
This link gives details on allowing a user to manage GPOs domain wide:
http://technet.microsoft.com/en-us/magazine/gg416505.aspx
This link gives details on allowing a user to manage GPOs domain wide:
http://technet.microsoft.com/en-us/magazine/gg416505.aspx
ASKER
that link only allows creation of GPOS .....
I need a way to allow a user to edit all GPOS in a domain ....
I need a way to allow a user to edit all GPOS in a domain ....
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://technet.microsoft.com/en-us/library/cc754542.aspx