Re: I need help with configuring GP?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Howdie TD!

TD schrieb:
Hello folks. I need some help. I am trying to figure out how I can use GP in a Windows 2003 environment to give rights to a "limited Admin person" to be able to create email enabled user & computer accounts, as well as delete these same records at the OU level only. Which settings do I need to set to make this happen, + bind these settings to the specific OU?

You wouldn't do that with Group Policy, as Group Policy always triggers sort of client machines.

What you want to achieve is granting Active Directory priviledges to user in order to create/manage objects. Just fire up "Active Directory Users and Computers" and right-click your OU - then click "Delegate Control...". That opens a wizard that will help you grant those people appropriate rights. It's pretty much straight-forward.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.



Relevant Pages

  • Re: Question about group policy and user created admin accounts.
    ... Please visit the experts in the Group Policy newsgroup ... Get Windows XP Service Pack 2 with Advanced Security Technologies: ... | uses admin rights? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: aplication error
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.general)
  • Re: Install Service Pack 4 automatically in several computers
    ... How can I ensure that the computer accounts have read and apply rights to ... >> first you shouldn't cross post like this. ... >> force it to be applied in whatever interval you set in group policy. ...
    (microsoft.public.win2000.general)
  • Re: Install Service Pack 4 automatically in several computers
    ... How can I ensure that the computer accounts have read and apply rights to ... >> first you shouldn't cross post like this. ... >> force it to be applied in whatever interval you set in group policy. ...
    (microsoft.public.win2000.group_policy)
  • Re: Install Service Pack 4 automatically in several computers
    ... How can I ensure that the computer accounts have read and apply rights to ... >> first you shouldn't cross post like this. ... >> force it to be applied in whatever interval you set in group policy. ...
    (microsoft.public.win2000.setup)