Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Active Directory > "Group Policy Owners Group" question ?

Reply
Thread Tools Display Modes

"Group Policy Owners Group" question ?

 
 
Thomas C.R (DK)
Guest
Posts: n/a

 
      11-08-2005
Hi

I have put a user in the "Group Policy Owners Group" but the user is not
granted the rights to administere GPO's why ? should the user be put in other
groups to get this working ?

I know it works with the domain group, but I do not want the user getting
this right ;-)

--
Best Regards
Thomas C.R. (DK)
 
Reply With Quote
 
 
 
 
Paul Williams [MVP]
Guest
Posts: n/a

 
      11-19-2005
GPO Creator Owner allows you to create and modify GPOs.
--
http://www.microsoft.com/technet/pro...34b245fe7.mspx


To modify other GPOs, you need the edit permission:
--
http://www.microsoft.com/technet/pro...34b245fe7.mspx


Here's some more info.:
--
http://www.microsoft.com/technet/pro...09b58306f.mspx

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


 
Reply With Quote
 
 
 
 
Thomas C.R (DK)
Guest
Posts: n/a

 
      11-27-2005
Hi

I am not quite sure, all the documentation I have read, the group "Group
Policy Create Owners" should have access to modify policyes, but not I my
domain !?

What should I change, to get this working as the documentation says should
be default ?
--
Best Regards
Thomas C.R. (DK)


"Paul Williams [MVP]" wrote:

> GPO Creator Owner allows you to create and modify GPOs.
> --
> http://www.microsoft.com/technet/pro...34b245fe7.mspx
>
>
> To modify other GPOs, you need the edit permission:
> --
> http://www.microsoft.com/technet/pro...34b245fe7.mspx
>
>
> Here's some more info.:
> --
> http://www.microsoft.com/technet/pro...09b58306f.mspx
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>

 
Reply With Quote
 
Paul Williams [MVP]
Guest
Posts: n/a

 
      11-28-2005
If the group doesn't have permissions to modify the GPOs, you can grant it
edit permissions. You can either do this on a per-GPO basis, by modifying
the DACL of the GPO in question, or you can modify the permissions on
CN=Policies, CN=System, DC=domain-name, DC=com. The former can be
accomplished using GPMC, DSA.MSC, ADSIEdit.msc, etc. The latter DSA.MSC or
ADSIEdit.msc (or any command line tool, LDP or script for both of course).

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Group policy Creator Owners group mart the bike rider Active Directory 2 04-23-2007 01:50 PM
Laptop Owners -> OEM May be the Way to go Kevin Young Windows Vista Hardware 4 02-03-2007 02:45 AM
Troubleshooting Vista: Owners/Access Problems Allie Windows Vista Administration 0 06-19-2006 08:22 AM
Question for 360 owners with XP Media Center RKRM Windows Media Center 2 01-06-2006 02:51 PM
Question to Acer Ferrari 4000 Owners Niels Berglund Windows 64 Bit 4 10-03-2005 06:59 AM