GPO permission management

[Guest]

Hi everybody!

I was told tocreate a security group to enable GPO management on users and PCs OUs, but to prevent this group managing GPO on servers OUs. Is there any way to do it? I have no idea. Using Win2k3 AD.

Thanx,
R.V.

 

[Tomasz Onyszko]

Hi everybody!

I was told tocreate a security group to enable GPO management on users and PCs OUs, but to prevent this group managing GPO on servers OUs. Is there any way to do it? I have no idea. Using Win2k3 AD.

You can set ACL's on the GPO object. So create GPO objects on the users
and PCs OUs and giv this user right to wrote to this GPO.If they have to
add or delete their own GPO objects give them right to do this on the
ACLs for OU object

 

[Guest]

Hi Tomasz!

Thanx, I haven't realize that the "link GPO" is not an GPO-property, byt OU-property

R.V.