Many thanks, John! I'll have a good long look at that article. And, we played around quite a bit with the GPMC.
-- Larry Wahlers Concordia Technologies The Lutheran Church - Missouri Synod mailto:[EMAIL PROTECTED] direct office line: (314) 996-1876 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Monday, June 26, 2006 2:17 PM > To: [email protected] > Subject: Re: [ActiveDir] Group Policy question > > Hi Larry... > > > http://technet2.microsoft.com/WindowsServer/en/Library/a834e84 > 4-8eb2-4ee2-927c-9989b4f55dd71033.mspx?mfr=true > > You can easily use the GPMC to delegete where they can link them, just > click the OU, and the delegate tab. > > HTH, > John > > > > > > Larry Wahlers > > <[EMAIL PROTECTED] > > ncordiatech.org> > To > Sent by: > [email protected] > [EMAIL PROTECTED] > cc > ail.activedir.org > > > Subject > [ActiveDir] Group > Policy question > 06/26/2006 01:27 > > PM > > > > > > Please respond to > > [EMAIL PROTECTED] > > tivedir.org > > > > > > > > > > Colleagues, > > Our Microcomputer Support group wants the ability to create > Group Policy > objects and apply them to various workstations. I've taken a > few classes > in AD, but I'm a tad shaky on how to give these folks just > barely enough > privs to create GPO's and only link them to the OU's I choose. > > It would seem that I should add the whole Micro group to the "Group > Policy Creator Owners" group in the "Users" OU, but the description > "Members in this group can modify group policy for the > domain" scares me > a bit. > > Unless, of course, it is *also* necessary to use the Delegate Control > wizard on whatever OU's they need, thus limiting their power to link > GPO's to only those OU's. > > All suggestions from you knowledgeable AD Admins gratefully accepted! > > -- > Larry Wahlers > Concordia Technologies > The Lutheran Church - Missouri Synod > mailto:[EMAIL PROTECTED] > direct office line: (314) 996-1876 > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
