Re: GPO Management Delegation

Everyone,

I really appreciate all of the responses! However, I have reviewed and
followed all of these documents. I checked the permissions on the Policy
folder in SYSVOL and the group in question does indeed have "Write"
permission on that folder.

"Meinolf Weber" wrote:

Hello sevensixtwo187,

Also have a look here:
http://technet.microsoft.com/en-us/library/cc737014.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello,
I have what I consider an interesting and frustrating problem. I have
attempted to grant some non domain admin users that are OU admins the
ability
to create and link GPOs in the OU they administer. I have followed
the
procedure outlined by Microsoft. I.E. I have added the Security Group
they
belong to to the "Group Policy Creator/Owners group" I have also added
them
to the delegation tab for Group Policy object creation in our domain
and I
have granted them the right to link GPOs in GPMC. When you right
click on
the OU they administer and attempt to Create & Link a new GPO, it is
not
grayed out and it will ask for the name of the new GPO. But, once you
name it
and click "OK", it will then give an "Access Denied" error. If this is
attempted on any other OU, the GPO actions are grayed out. I have
reasearched and double checked everything but it does not work and I
cannot
find anything that sticks out as being wrong. It is almost as if the
permissions are "halfway" in place. Any thoughts, ideas or
suggestions would
be greatly appreciated.
Thank you!




.

Relevant Pages

  • Re: User Profiles
    ... You can use Folder redirection for the Start Menu, ... Exactly what icons are you getting from the Default Domain Policy, ... and in which GPO setting are they defined? ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Trouble with Win2003 Folder Redirection Policy
    ... giving NTFS permissions to that group. ... From what information you've given me the policy is correct as long as ... The user's home folder in the profile section of the AD has been ... updated to the new server as well. ...
    (microsoft.public.windows.server.general)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... This posting is provided "AS IS" with no warranties, ... The policy causing the 1058 messages ... permissions either so surely if this was the issue the messages ... Root folder is the highest folder so "windows" ...
    (microsoft.public.windows.server.general)
  • Re: GPO Error
    ... Configured GPO on an OU 2 levels under the domain object called folder ... Configured a 2nd GPO on the the parent OU ... custom Group Policy Templates should be edited yet this is the first I have ... you should not edit the default adm files two reasons. ...
    (microsoft.public.windows.group_policy)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... permissions either so surely if this was the issue the messages would ... Root folder is the highest folder so "windows" ... Default Domain Policy and is one i have customised over time. ... Also one of the articles mentions permissions for the "everyone" ...
    (microsoft.public.windows.server.general)
Loading