Re: Delegating authority!

Herb - thanks for the reply -
I am aware of the delegation authority onto OU structure etc. but my
question is how to delegate authority to apply GPO onto Site to an account in
child domain??
I know there is some way to delegate it through sites & services "net
Services" node.
thanks
-Jim

"Herb Martin" wrote:

> "JsX" <JsX@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:18E26E09-FEA4-4A41-B030-AA851A4EC4FA@xxxxxxxxxxxxxxxx
> > Hi all -
> > Is there a way that an "enterprise Admin" can delegate permission to an
> > account in child domain to apply group policy on the child domain related
> > sites???
>
> Groups Policies are LINKED to OUs (not accounts)
> and that ability can be delegated.
>
> I cannot remember if this one is in the Delegation of
> Control Wizard but you can certainly do it direct with
> the OU object properties, Security (requires AD Users/Computers
> Advanced view)
>
> Also Full Control of the OU in question would accomplish this.
>
> > I know there is some way to do it through AD site & srv (service
> > node), but I am not quite sure how.
>
> Link Group Policy (on the OU)
>
> GPOs are then APPLIED to Users or Computers based on
> permissions (User or Computer must have BOTH "Read"
> and "Apply Group Policy" for it to work.)
>
>
>
.

Relevant Pages

  • Re: GPO - Create/Delete
    ... Highlight the "Group Policy Objects" node and then select the Delegation tab on the right. ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... "Darren Mar-Elia" wrote in message ...
    (microsoft.public.windows.group_policy)
  • Re: Trust user for delegation: AD access denied
    ... same error "Your security settings do not allow you to specify whether or not this account is to be trusted for delegation". ... In Active Directory Users and Computers, right-click the computer or user account and select Properties. ... There is a Group Policy setting *on the Domain Controller* that must be changed. ... although I'm logged in as domain admin. ...
    (comp.protocols.kerberos)
  • Re: Delegation of GP Linking to a subset of GPOs
    ... i delegated to a group through Delegation Wizard "manage group policy ... I reviewed several articles about GPO delegation but there is not much i can ... Best regards. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permissions or Policy
    ... Herb, this appears to be true only for system services - those basically ... > Such can be done through delegation on the service ... > No matter how you do it this will be a permission but ... > you may distribute it to may machine by using a policy. ...
    (microsoft.public.win2000.security)