Administrering GPO's permissions - HELP

  • Thread starter Thread starter IJCHASE
  • Start date Start date
I

IJCHASE

Hi,

We have a user in one child domain that needs to be able to create GPO's in
another child domain. (there is one Root domain and 2 child domains off this
root).
How can this be achieved seeing that the Group Policy Creators owners group
in the domain he is not a member of is only a Global Group, and cannot
contain members from the other child domain? Is there a workaround to sort
out this problem?

Regards

Ian
 
Ian-

You can modify the GPO create permissions on a domain using the GPMC. So,
you could create a new local group called "GPO Creators" and include a
global group from the foreign domain in it. Then you can add that local
group as a group that has the ability to create GPOs.

Darren
 
Back
Top