Re: Delegating authority!

"JsX" <JsX@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:18E26E09-FEA4-4A41-B030-AA851A4EC4FA@xxxxxxxxxxxxxxxx
> Hi all -
> Is there a way that an "enterprise Admin" can delegate permission to an
> account in child domain to apply group policy on the child domain related
> sites???

Groups Policies are LINKED to OUs (not accounts)
and that ability can be delegated.

I cannot remember if this one is in the Delegation of
Control Wizard but you can certainly do it direct with
the OU object properties, Security (requires AD Users/Computers
Advanced view)

Also Full Control of the OU in question would accomplish this.

> I know there is some way to do it through AD site & srv (service
> node), but I am not quite sure how.

Link Group Policy (on the OU)

GPOs are then APPLIED to Users or Computers based on
permissions (User or Computer must have BOTH "Read"
and "Apply Group Policy" for it to work.)


.

Relevant Pages

  • Re: Permissions to join machine to domain
    ... I'm looking for just a list of ACL/ACE permissions to allow only joining to ... I want to delegate the following control to a group. ... Locked User Accounts: ... 294777 - How to Delegate Group Policy Control to users in Trusted Domain: ...
    (microsoft.public.windows.server.active_directory)
  • Delegating authority!
    ... Is there a way that an "enterprise Admin" can delegate permission to an ... account in child domain to apply group policy on the child domain related ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO - Create/Delete
    ... the ability to delegate creation/deletion/modification of user or computer objects is an AD delegation task and has nothing to do with GP. ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)
  • 70-292
    ... of the questions I saw dealt with group policy - some rather obscure ... to delegate - when to delegate and obviously some replication. ... group memberships and when and why to apply group policy to what. ... and 70-296 as well as used some Transcenders. ...
    (microsoft.public.cert.exam.mcse)
  • Re: 70-292
    ... The DNS questions were ... to delegate - when to delegate and obviously some replication. ... group memberships and when and why to apply group policy to what. ... and 70-296 as well as used some Transcenders. ...
    (microsoft.public.cert.exam.mcse)