Re: GPO Management Delegation



It is just for the parent. Using a test account that should be able to create
GPOs but can't, I COULD create a folder in the Policies folder. This is
indeed perplexing.

"Ace Fekay [Microsoft Certified Trainer]" wrote:

In news:E31D90C4-863D-494A-84B2-5B3B81FB4272@xxxxxxxxxxxxx,
sevensixtwo187 <sevensixtwo187@xxxxxxxxxxxxxxxxxxxxxxxxx> requesting
assistance, typed the following:
I think I may have found an issue. The permissions on the Policies
folder do not inherit down to child objects under the Policies
folder. Does anyone know if "Allow inheritable permissions to
propagate ....." should be checked on the Policies folder ?

No, they shouldn't be. I just looked at a fresh install I was prepping for a
customer. Properties of the Policy folder, Security, advanced, which I
assume is what you are referring to.

Since you are in there, do you see that group? What is it's permissions
listed? In Advanced, highlight the group, click Edit. Is it set to just the
parent or child objects as well?

Ace


.



Relevant Pages

  • permissions inheritance problem
    ... I have a folder containing several thousand files. ... configuration is set to 'Allow inheritable permissions from parent to ... propagate to this object and all child objects', ... the Desktop because its 'Allow inheritable permissions' box is still set on. ...
    (microsoft.public.windows.server.general)
  • Urgent- plz ! Local Policy problem
    ... From what I've seen...many of the policies ... yourself out of it...In Windows Explorer, ... If you can't see the GroupPolicy folder in System32, ... This will prevent the Administrator account from seeing ...
    (microsoft.public.windowsxp.security_admin)
  • Re: which policy resets secuirty permisions on files/directories?
    ... > computer reboots or refreshes the policies, ... has set these permissions on that folder or possibly a parent folder. ... think the problem is in the local group policy on the computer. ...
    (microsoft.public.win2000.security)
  • Re: policies folder in SYSVOL renamed?
    ... how many DCs experience "the problem".? ... folder had been deleted. ... I restored the policies so that issue has been ... The server I do the rename on is the FSMO. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPMC - The system cannot find the specified file / error 1058
    ... I checked all the GP's and it looks like that the new policies that I create ... I did notice that in the policy folder I have 2-3 policies that look like ... Those folders on have a ADM folder in it. ... > Hi Mike - ...
    (microsoft.public.windows.group_policy)