Administrering GPO's permissions - HELP

I

IJCHASE

Hi,

We have a user in one child domain that needs to be able to create GPO's in
another child domain. (there is one Root domain and 2 child domains off this
root).
How can this be achieved seeing that the Group Policy Creators owners group
in the domain he is not a member of is only a Global Group, and cannot
contain members from the other child domain? Is there a workaround to sort
out this problem?

Regards

Ian
 
D

Darren Mar-Elia

Ian-

You can modify the GPO create permissions on a domain using the GPMC. So,
you could create a new local group called "GPO Creators" and include a
global group from the foreign domain in it. Then you can add that local
group as a group that has the ability to create GPOs.

Darren
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

inheritance question 4
Linknig GP across domain 1
Problem: Permissions in AD 2
Windows 2003 GPO's in a domain not applied 7
Restrict user interactive access across forest. 5
Win2003: Different DefaultDomainPolicy between root and sub domain 9
GPO processing when logged in accont is from a fifferent domain 1
Delegation of rights not providing rights to edit GPO's 4

Top