Re: Delegating authority!

"JsX" <JsX@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5E7F8683-67DC-4301-BAA9-5F597DCE5078@xxxxxxxxxxxxxxxx
> Herb - thanks for the reply -
> I am aware of the delegation authority onto OU structure etc. but my
> question is how to delegate authority to apply GPO onto Site to an account
in
> child domain??

Sites are done similarly but the Permissions (and GPO
linkage itself) are usually done in AD Sites and Services.

Use the permission on properties there.

> I know there is some way to delegate it through sites & services "net
> Services" node.

On the Site itself.

Also the newer GP Management Console consolidates
such policy management -- although I am not sure about
the container (link group policy) permissions/delegations.

Also note that there is no concept of "child domain related
sites".

Sites are really Enterprise objects (belong more to the Forest
than any particular domain). They are stored in the Configuration
partition.


.