Re: Delegation of GP Linking to a subset of GPO's

well, i know that he can only manage that OU. but i won't him to only link to
that OU the few GPO's that I specify.

I tested it out---

1) i delegated to a group through Delegation Wizard "manage group policy
links"
2) put user in group
3) logged in as the user, and linked in a random GPO which was created for a
different OU

I reviewed several articles about GPO delegation but there is not much i can
find easily. I would hope that Microsoft could explain if what I'm asking is
possible or not.





"Hayman Ezzeldin" wrote:

Dear Jimi,
If you set the Delegation at the OU level, then he will be only able to
maintain this OU, nothing more. And don't worry.
Best regards.

"JimiBlues" <JimiBlues@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4D74CCD4-4194-493C-AFED-C13C46D36776@xxxxxxxxxxxxxxxx
thanks for the info. but If i set those properties, would the delegee be
able
to link any GPO in the domain, or just the few GPO's i select?

"Hayman Ezzeldin" wrote:

Dear Jimi,
gPLink and gPOtions which are the "Managing Group Policy Links" options
you
will need that allows you to delegate users to manage GP Links for a
Site,
Domain or an OU.
Just assign the read and write permissions on both properities in order
to
manage a container's link

Best regards.

"JimiBlues" <JimiBlues@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A1E38484-F5DF-4F43-9E40-C083B94888E5@xxxxxxxxxxxxxxxx
Hi,

I would like to give control of an OU to a team in my domain.

link to their OU and subOU's and modify a pre-created set of GPO's
which I
give them

But as far as I can see, if I give them GP link rights, they can link
any
GPO in the domain? is that correct?

thanks.







.

Relevant Pages

  • Re: Delegation of GP Linking to a subset of GPOs
    ... If you set the Delegation at the OU level, then he will be only able to ... And don't worry. ... Best regards. ... to link any GPO in the domain, or just the few GPO's i select? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local GPO. Trsuted domain Groups.
    ... Group policies can only be applied to users or computers not to groups. ... They have to be in an OU where the GPO is linked to. ... Best regards ... only used GPO one, and what I did was add a Group Policy to my domain, ...
    (microsoft.public.windows.server.general)
  • Re: Resetting Group Policy
    ... We haven't made any changes to the default group policy that we need. ... we bring it back to default without harm? ... Regards ... >> with the GPO. ...
    (microsoft.public.windows.server.sbs)
  • Local GPO. Trsuted domain Groups.
    ... I don't know if the configuration I'm looking for is possible. ... used GPO one, and what I did was add a Group Policy to my domain, and then ... Regards.. ...
    (microsoft.public.windows.server.general)
  • Re: Using Group Policy to give install permission
    ... Group Policy is simply (well, ... Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO. ...
    (microsoft.public.win2000.group_policy)