Re: GPO Management Delegation

I think I may have found an issue. The permissions on the Policies folder do
not inherit down to child objects under the Policies folder. Does anyone know
if "Allow inheritable permissions to propagate ....." should be checked on
the Policies folder ?

"sevensixtwo187" wrote:

I delegated the user directly and still no luck.

"sevensixtwo187" wrote:

Delegating the user directly was my next thought on the matter. I will try
that and then report back with the results.
Global Security Group. Domain and Forest in native 2003 mode. 7 DCs. 5 Sites.

Thank you,

"Ace Fekay [Microsoft Certified Trainer]" wrote:

In news:CBD11D3A-B33B-437E-8876-6F8296960CAB@xxxxxxxxxxxxx,
sevensixtwo187 <sevensixtwo187@xxxxxxxxxxxxxxxxxxxxxxxxx> requesting
assistance, typed the following:
Jorge,

I appreciate your response. However, as I have stated, I have indeed
read the articles concerned with this and I have followed them. This
group is a member of the "GP Creator/Owner" group AND they have been
explicitly granted the permission to link GPOs in the OU in question.
Members of that group can successfully link GPOs already in
existance. They cannot creat new GPOs ---despite the fact that the
group they are a member of has been granted that right.

Thank you,


That is an important passage that Jorge pointed out. Thanks, Jorge!

Curious, if you delegate the user directly (not by the group), does it work?
If so, what type of group did you create? What functional mode is the domain
and forest in? How many DCs and Sites?

Ace


.

Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • Re: service pack update 2
    ... My frustration continues with an additional 8 attempts to install service ... In the main registry, there are two entries: ... In the advanced permissions, ... Make the changes to the parent object, and then the object will inherit ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: service pack update 2
    ... I made the two entries as you suggested. ... In the advanced permissions, ... Make the changes to the parent object, and then the object will inherit ... I got the registry backed up, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: service pack update 2
    ... I went back to run it again and this time checked the "inherit ... permissions from MACHINE\SOFTWARE. ... Add Owner group and give them "Full Control" ... I got the registry backed up, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: service pack update 2
    ... Assigning the Permissions: ... Add Owner group and give them "Full Control" ... I am to inherit something? ... I got the registry backed up, ...
    (microsoft.public.windowsxp.help_and_support)