Results 1 to 4 of 4

Thread: Group Policy Creator Owners Group

  1. #1
    Join Date
    Jan 2010
    Posts
    3

    Group Policy Creator Owners Group

    Hello, I have a user which manages an OU. Do I really need to add him to the Group Policy Creator Owners group so that ha can Create, Edit, Delete GPO's in the OU.

    If you can explain the difference between the delegation setting of the OU and the delegation setting of the GPO in GPMC would clear things out for me.

  2. #2
    Join Date
    Mar 2010
    Posts
    276

    Re: Group Policy Creator Owners Group

    Group Policy Creator Owners group allows members to create new GPO. However, members can only edit or delete the GPO you created. Group Policy Creator Owners group also does not have permission to link the GPO to a container such as a domain or OU; that permission has yet to be determined manually. To add a user or group, simply open the Group Policy Creator Owners group, which is in the Domain Users container, and add as needed.

  3. #3
    Join Date
    Jun 2011
    Posts
    454

    Re: Group Policy Creator Owners Group

    You can simply allow the non admin users or a group in your network to work with your existing domain or site. Also you can add them in OU GPO through specific permission options only. Rightnow you can provide them three kind of different settings. This consist of read settings through which you can let users or group to view the gpo. But they won't have access to edit gpo settings. The second thing you can do is offer them option to edit settings. This is another limited one. Here the user or group is not allowed to delete anything. And the latest one is edit, delete and modify everything.

    Delegate Control to Users to Work with GPOs

  4. #4
    Join Date
    Jul 2011
    Posts
    364

    Re: Group Policy Creator Owners Group

    It is important that you must properly delegate the group policy settings. Or else there can be problem with users or group who had allowed to access your domain. I am giving you a link that give you detail information on Delegating Administration of Group Policy. GPO is a vital component when it comes to manage Windows Server environment. It allow you to have complete control and grant access to others. So here you have the complete power to properly delegate rights. It is essential that when you are working on Admin control you must manage that properly.

    Delegating Administration of Group Policy

Similar Threads

  1. Replies: 2
    Last Post: 17-12-2013, 09:10 PM
  2. Using local group policy to override domain group policy
    By Nickason in forum Active Directory
    Replies: 3
    Last Post: 28-09-2011, 04:20 AM
  3. Folder Redirection policy object don't exist in group policy
    By Mohammad_dn in forum Operating Systems
    Replies: 3
    Last Post: 12-01-2011, 11:41 PM
  4. Replies: 3
    Last Post: 07-10-2009, 02:12 PM
  5. Group Policy -> Missing Group Policy settings
    By Jeroen in forum Active Directory
    Replies: 3
    Last Post: 24-07-2007, 11:00 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,675,326,811.79344 seconds with 17 queries