Hi Larry...
http://technet2.microsoft.com/WindowsServer/en/Library/a834e844-8eb2-4ee2-927c-9989b4f55dd71033.mspx?mfr=true You can easily use the GPMC to delegete where they can link them, just click the OU, and the delegate tab. HTH, John Larry Wahlers <[EMAIL PROTECTED] ncordiatech.org> To Sent by: [email protected] [EMAIL PROTECTED] cc ail.activedir.org Subject [ActiveDir] Group Policy question 06/26/2006 01:27 PM Please respond to [EMAIL PROTECTED] tivedir.org Colleagues, Our Microcomputer Support group wants the ability to create Group Policy objects and apply them to various workstations. I've taken a few classes in AD, but I'm a tad shaky on how to give these folks just barely enough privs to create GPO's and only link them to the OU's I choose. It would seem that I should add the whole Micro group to the "Group Policy Creator Owners" group in the "Users" OU, but the description "Members in this group can modify group policy for the domain" scares me a bit. Unless, of course, it is *also* necessary to use the Delegate Control wizard on whatever OU's they need, thus limiting their power to link GPO's to only those OU's. All suggestions from you knowledgeable AD Admins gratefully accepted! -- Larry Wahlers Concordia Technologies The Lutheran Church - Missouri Synod mailto:[EMAIL PROTECTED] direct office line: (314) 996-1876 List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
