As a domain admin, I delegate the rights for OU Admins group to create, delete, and modify GPOs in their respected OUs. However, I do not understand what permissions the OU Admins group needs to modify and save the startup script located in Computer Configuration | Windows Settings | Scripts.
Every time the OU Admins attempt to save the VBS file located in the SYSVOL they receive an error saying "Cannot access this file. Check security privileges over the network drive." I did check the SYSVOL share and they had full control to the GPO (the GUID folder) and all subfolders. Should I setup a File System share via the Domain Controller Security Settings? Any ideas. Thanks, Eric List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
