Solved

Permissions on GPO

Posted on 2013-05-29
7
349 Views
Last Modified: 2013-05-31
Is there a way to give a user permission to edit all GPO objects without making them an Administrator or Domian Admin?
0
Comment
Question by:oasisuk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204391
0
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39204402
I think this is what you are looking for...  Have a look at the answer.

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/f0f3c17f-4222-471b-83b8-ecb523c19121/

HTH,

Kent
0
 
LVL 12

Expert Comment

by:Chris
ID: 39204403
The above link only allows you to delegate permissions to a specific GPO.

This link gives details on allowing a user to manage GPOs domain wide:

http://technet.microsoft.com/en-us/magazine/gg416505.aspx
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:oasisuk
ID: 39204463
that link only allows creation of GPOS .....

I need a way to allow a user to edit all GPOS in a domain ....
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39204502
You will want to use the Group Policy Script Pack and assign that user (or a group) permission to edit any existing GPOs.
0
 
LVL 10

Expert Comment

by:Subhashish Laha
ID: 39204504
0
 
LVL 5

Accepted Solution

by:
balmasri earned 500 total points
ID: 39205998
If you select the Group Policy Objects container for the domain in the GPMC and select the Delegation tab in the details pane. add the required users and permissions
0

Featured Post

Resolve Critical IT Incidents Fast

If your data, services or processes become compromised, your organization can suffer damage in just minutes and how fast you communicate during a major IT incident is everything. Learn how to immediately identify incidents & best practices to resolve them quickly and effectively.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Server 2008 Not services listed 23 75
Restore a DC asap 11 66
How can we block any website on a server 2007 standard or server 2008R2? 5 52
msiexec won't run 4 25
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question