Ability to create GPOs, but only link them to specific OU

Hi guys,
Running a 2008R2 domain.  I need to delegate the permissions to create new GPOs to a specific account, but I want that account to only be able to link them to a specific OU.  I know how to delegate the link permissions to specific OUs, but
not how to delegate permissions to create GPOs without making the account a member of Group Policy Creator Owners which would give it ability to edit other GPOs.  If anyone knows a way I can delegate permissions to create new GPO(bot not edit existing
GPOs), please let me know.  I was checking the User rights Assignments in the Default Domain Controllers Policy, but not seeing the ability to add a user in there.
Dan
Dan Heim

Hi Dan,   
If you want to delegate permissions to create GPOs, you can refer to the following steps:
1. Open Group Policy Management.
2. In the console tree, click Group Policy Objects in the forest and domain for which you want to delegate creation rights for Group Policy objects (GPOs).
3. In the results pane, click the Delegation
4.Click Add.
5. In the Select User, Computers, or Groups dialog box, click Object Types, select the types of objects to which you want to delegate creation rights for GPOs, and then click
OK.
6. Click Locations, select either Entire Directory or the domain or organizational unit containing the object to which you want to delegate creation rights, and then click
OK.
7. In the Enter the object name to select box, enter name of the object to which you want to delegate creation rights by doing one of the following:
◦ If you know the name, type it, and then click OK.
◦ To search for the name, click Advanced, enter the search criteria, click Find Now, select the name in the list box, click OK, and then click OK.
Based on my test, after delegating creation of GPOs to a user by following above step, the user will not have permissions to edit the GPOs that are not created by himself.
For more detail information about delegating creation of GPOs , you can refer to the following link:
Delegate creation of Group Policy objects using GPMC
http://technet.microsoft.com/en-us/library/cc739363(v=ws.10).aspx#BKMK_Addgroup
Best Regards,
Erin

Similar Messages

  • ? on photo - file found but only linking that one photo even when the box is checked.

    In Lightroom Library, a set of photos all have ?? question marks.. SO when I begin to link to the file, it is not linking the whole folder.. but only one at a time.  What can I do?

    what happened was files were moved outside lightroom, and its having trouble locating them...
    Locate missing photos
    Sometimes the link between the catalog and a photo breaks. When that happens, Lightroom displays a Photo Is Missing icon in image cells in the Grid view and the Filmstrip. In the Develop module, Lightroom indicates that the photo is offline or missing. Links between a catalog and its photos can break for a variety of reasons, including because photos are moved in the operating system instead of from within Lightroom, or because photos are stored on an external drive that is offline. If the drive is offline, turn it on.
    (Optional) In the Library module, choose Library > Find Missing Photos to display missing files in the Grid view.
    Click the Photo Is Missing icon in a thumbnail cell in the Grid view.A dialog box opens and displays the last known location of the missing photo.
    Click the Locate button, navigate to where the photo is currently located, and then click Select.
    (Optional) In the Locate dialog box, select Find Nearby Missing Photos to have Lightroom search for other missing photos in the folder and reconnect them as well.
    you are going to want to do the #4, to reconnect all of them.
    -janelle
    Ps. if that doesn't work, trying synching your folders:
    Synchronize folders
    When you synchronize folders, you have the option of adding files that have been added to the folder but not imported into the catalog, removing files that have been deleted, and scanning for metadata updates. The photo files in the folder and all subfolders can be synchronized. You can determine which folders, subfolders, and files are imported.
    In the Folders panel, select the folder you want to synchronize.
    Choose Library > Synchronize Folder.
    In the Synchronize Folder dialog box, do any of the following:
    To import photos that appear in the folders but have not been imported in the catalog, select Import New Photos. If you select Show Import Dialog Before Importing, you can specify which folders and photos are imported.
    To remove photos that have been deleted from the folder but not from the catalog, select Remove Missing Photos From Catalog. If this option is dimmed, no files are missing. (You can choose Show Missing Photos to display the photos in Grid view.)
    To scan for any metadata changes made to the files in another application, choose Scan For Metadata Updates.
    Click Synchronize.
    If the Import Photos dialog box opens, specify the folders and files you want to import, and then click Import.

  • I have songs from icloud showing on more than one device but only want them on one so how do i delete them

    Can some tell me how i can not have the songs showing on more than one device for my account

    Krshrtr wrote:
    it wont let you swipe to the left on songs that have the cloud next to them
    That's correct - it only deletes them from your phone, not from iCloud
    If you go into Settings, Music and set Show All Music to Off, you will only see the songs that are actually on the phone.
    One other tip - once you've deleted the songs/lists you no longer want, restart the phone (hold the Home and Sleep buttons for about 10 seconds until the Apple logo appears) to make sure the songs are gone.

  • IMessage - multiple phones but only want them on one

    Here is what I am trying to do.
    I have 3 devices (Iphone4, ipad and iphone 4s).
    I would like them all to share the same apple id to share apps.
    I have no need to imessage on one device and pick it up on another.
    How should I set up these devices so that:
    1. The can share itunes apps (only pay once)
    2. each has its own imessage
    3. I can use find my iphone from any of the three devices and see all the devices
    Curently imessage is setup to receive messages at "my phone number" at each device. That is, the iphone 4 has its phone number in there and the iphone 4s has its phone number in there. Would I just leave this alone and I would be able to do what I would like to above?
    I have no need for imessage on the ipad.
    We cannot test it as the texts since upgrading to ios5 have only been between the two iphones. I have no idea what will happen when another iphone sends either phone an imessage. The last thing we want to happen is have it sent to both phones.
    Thanks to anyone who can provide assistance on proper setup.

    Krshrtr wrote:
    it wont let you swipe to the left on songs that have the cloud next to them
    That's correct - it only deletes them from your phone, not from iCloud
    If you go into Settings, Music and set Show All Music to Off, you will only see the songs that are actually on the phone.
    One other tip - once you've deleted the songs/lists you no longer want, restart the phone (hold the Home and Sleep buttons for about 10 seconds until the Apple logo appears) to make sure the songs are gone.

  • Firefox 4 Beta (v9,10&11) opens on my PC (Win 7) and creates tabs but only the close button works I cannot click on any tabs or content in the "active" tab?

    It looks like Firefox has started ok, all the tabs are populated, but nothing can be accessed by clicking except the Close button and the right hand scroll bar... it is frustrating. Firefox 3 works fine still.

    Create a new profile exclusively for the 4.0 beta version and create a desktop shortcut with -P "profile" appended to the target to launch that profile.
    * http://kb.mozillazine.org/Testing_pre-release_versions
    * http://kb.mozillazine.org/Creating_a_new_Firefox_profile_on_Windows
    * http://kb.mozillazine.org/Shortcut_to_a_specific_profile
    * http://kb.mozillazine.org/Using_multiple_profiles_-_Firefox

  • Itunes has doubled up the songs on my iPhone but only shows them singly within iTunes. Does anyone know how to fix this?

    My iPhone lists every song (songs that I have imported from cd's, but not purchased through iTunes) twice. iTunes only shows 1 instance of each song. If I delete a doubled up entry from the phone, it deletes the whole song. Has anyone else run into this problem?

    Hey!  You are a gem!  At the moment it seems to be working but I am leaving it connected to iTunes until I updaet to the next version and hopefully that will fix whatever it was that caused the problem.  Thank you a milion times over!  It is 11.14pm over here and all the call centres are closed!
    THANKYOU!

  • Recently Installed Adobe 9 Pro Wont Create/Write Pdfs (only read them...)

    Windows XP where Version 8 was first completely removed then Adobe 9 Pro was installed.  The XP machines can no longer write/create pdfs whereas previously with v8 there were no issues.  No pop error message...simply the pdf generation process does not start or complete.  Strangely, there are no relevant entries in the application or system event viewer logs either.  Has anyone else experienced this?  Have you found a solution?

    You did not indicate how you are trying to create the PDF. Open a document in an application and select the print to the Adobe PDF printer. Before printing, select print-to-file and then complete the process (be sure you note where the file went and the name). Start Distiller and open the file you just created in Distiller. If that creates the PDF, then check for AcroTray running in the background. If it is not running, then start it.

  • Unexpectdly Quit!  But only while opening certain specific projects

    I'm trying to do a demo real for an interview tomorrow and for the first time in my history with it, Final Cut will not open. It loads the most recent project (the one I want to open) to 6% and then unexpectedly quits. If I try to open FCP after a fresh boot it will open up to a new project, but then if I try to open the project I want, it loads to 6% and then gives the unexpectedly quit message again. If I try to open a smaller project, that project will open fine. But the ones I need, Nothing. I'm pulling this data from a Lacie 250 external Hard Drive, that very coincidentally, I had linked up to my schools FCP system just hours ago. I've searched the forums and tried some suggestions to no avail. Anyone seen this before?

    Can you open the project with the media offline? Could it be a corrupt render? Can you open the project as a different user? Unfortunately, it could simply be a corrupted project - do you have any autosaves? Is the revision of FCP at school different than that at home?
    Patrick

  • Mail uses wrong identity when sending mail but only in a very specific case

    Hey there we have a very strange thing happening here. There are two accounts in apple mail. user 1 is set as the default account and when user 1 replies to email sent to him it works as it should. When email is sent to user 2 and he replies it works correctly as well. But when an email comes addressed to both user 1 and user 2 and user 1 replies it is being sent as user 2 not user 1. Any ideas on what is causing this?
    Thanks for your help

    When both addresses in the To header are setup in Mail, Mail defaults to choose the first address listed in the distribution. You have to manually change that, or have separate User Accounts on this Mac for each user, and in that case each user would only setup his/her account.
    Ernie

  • How to create gpo for all users in all ou?????

    hello,plz help me.i want to create gpo for all users in all ou.but i dont want that gpo to do in domain????

    Can you elaborate what you mean by "but i dont want that gpo to do in domain"?
    In terms of applying it to all users, that's simple enough, you can simply leave the GPO's security filtering with its default setting as "Authenticated Users" which then apply to everyone.
    In terms of it applying to all OUs, you only have two options.
    1) Create the GPO and link it to the root of your domain, so it then applies to the entire domain and all the OUs within it.
    2) Create the GPO, but instead link it to each OU that you want it to apply to. You can apply one GPO to as many OUs as you want, simply right click on the OU and select "Link an Existing GPO...". It's then not applied to the root of the domain, only the
    OUs, but any changes you make to the GPO are applied to all the OUs that you've linked it to (rather than having a separate GPO for each of them).

  • Create a link to a specific spot in PDF document

    Is it possible to create a link from a Table of Contents item to a specific heading on a page within the same document. So far from what I've read and what I've tried I can only link to a specific page but not a specific section on that page. Is that possible? If so how to I do that? It's basically the same idea as HTML anchor links within the same HTML page. So if you have a links up top you can create named anchors for the destination spot later on down the page. I tried using the destinations in Acrobat also but it seems to also only point to the page, not the specific area on a page.
    If anyone knows if that's possible, could you either show me how to do it or point me to a tutorial online that shows how to do that. I've searched and searched but just cannot seem to find anything. Maybe I'm not using the right keywords to search.

    You can either link to an existing named destination or a view that you establish when you create the link. A named destination is a combination of a page and the view settings (e.g., fit width, fit visible, 200% zoom and scrolled 1/4 way down the page, etc.)
    When you add a new named destination, go to the page you want and set up the display of the page to what you want. Give the named destination a meaningful/descriptive name.
    When you create the link that you want to target a named destination, select an action of "Go to a page view" and set it to the current view. You then have to go and edit the action and select "Use Named Destination" and select from the list of named destinations in the document.
    You do not need to set up named destinations to link to a specific area of a page, but they are helpful when linking from other documents or systems, particularly if the document that's linked to changes with any frequency.
    To set up the same type of link without using named destinations, just add a new link and when you're presented with the "Create Link" dialog, select "Go to a page view" and navigate to the corresponding page, set the view you want, and click the "Set Link" button.

  • IE problems, but only with the Japanese part of my site

    I run an English school in Japan and after some searching on the internet found the suggestion of creating 2 sites and linking them, one in each language. My site is at http://web.me.com/canadaclubjp/ . The seems to work well on my Mac but I'm having problems with IE. It seems that the Japanese part of the site has elements disappearing for some reason. I recently added an extra navigation bar at the bottom, but that doesn't seem to be any problem. Any suggestions would be appreciated.

    propably you can try on firefox or you have to include japanese fonts code for IE
    Byez

  • In Textedit, how do I copy a hyperlink url, but only copy the link location and not the link text?

    Suppose I have a list of hyperlinked internet URL's. I want to extract their Internet addresses -- the link locations --  which are essentially hidden in the link text. Is there any way to select and copy the list of hyperlinks, but only copy the link locations, and not the link text?
    For example, with the links:
    The White House
    Google
    One of my previous posts
    What I really want to copy are: "http://www.whitehouse.gov/", "http://www.google.com/", and "https://discussions.apple.com/thread/2737556".

    I figured out how to do it. First, copy the hyperlinks onto a blank RTF document in TextEdit and save the file.
    Second, open the file from within TextEdit, and make sure that the box "Ignore rich text commands" is checked in the open file dialog box. In the open document, the hyperlinks from my example in my first post will look like this:
    {\rtf1\ansi\ansicpg1252\cocoartf1038\cocoasubrtf360
    {\fonttbl\f0\froman\fcharset0 Times-Roman;}
    {\colortbl;\red255\green255\blue255;\red0\green7\blue232;}
    {\info
    {\author Garald P. Weller}
    {\*\copyright Garald P. Weller}}\margl1440\margr1440\vieww20000\viewh14400\viewkind0
    \deftab720
    \pard\pardeftab720\sa240\ql\qnatural
    \f0\fs24 \cf0 \
    \pard\pardeftab720\sa240\ql\qnatural
    {\field{\*\fldinst{HYPERLINK "http://www.whitehouse.gov/"}}{\fldrslt \cf2 \ul \ulc2 The White House}}\
    \pard\pardeftab720\sa240\ql\qnatural
    {\field{\*\fldinst{HYPERLINK "http://www.google.com/"}}{\fldrslt \cf2 \ul \ulc2 Google}}\
    \pard\pardeftab720\sa240\ql\qnatural
    {\field{\*\fldinst{HYPERLINK "https://discussions.apple.com/thread/2737556"}}{\fldrslt \cf2 \ul \ulc2 One of my previous posts}}\
    Third, use the Automator function, "Get URLs From Text," to create a service, which I called "Get URLs From Text," that receives text from any window, gets the URLs, and copies the result to the clipboard:
    Fourth, select the entire page above, and go to TextEdit > Services to activate the "Get URLs" service.
    Fifth, create a new TextEdit document, and paste the result.
    The output is exactly what I wanted, the URLs -- i.e., the link locations -- of the three web pages, without the link text.
    Another utility that will extract URLs is CopyPaste Pro, which has an innate ability to extract Internet addresses from either web pages or text pages.

  • The curser includes a text box from a previous image or link when the curser is positioned on the side of the page. i click and it goes away but only to return again on the next launched page. how do i get rid of this?

    the cursor includes a text box from a previous image or link when the cursor is positioned on the side of the page. it will mainly happen when i hit "back" from the page i was on. i click and it goes away but only to return again on the next launched page. i also keep several tabs open and it will carry over to any one of them i go to. how do i get rid of this?
    == This happened ==
    Every time Firefox opened
    == when i upgraded to most recent version 3.6.8

    A number of extensions can cause that problem, you'll need to do a little troubleshooting to find out which extension is causing that to happen for you.
    [http://support.mozilla.com/en-US/kb/troubleshooting+extensions+and+themes]

  • I updated my Macbook Pro last week to Lion.  I went to go import pictures from a memory card to my iPhoto, but only a portion of them loaded before my iPhoto froze and I had to Force Quit it. Now iPhoto won't even open... Help!

    I updated my Macbook Pro last week to Lion.  I went to go import pictures from a memory card to my iPhoto, but only a portion of them loaded before my iPhoto froze and I had to Force Quit it. Now iPhoto won't even open... Help!
    Please! I need an answer fast!!!!

    Option 1
    Back Up and try rebuild the library: hold down the command and option (or alt) keys while launching iPhoto. Use the resulting dialogue to rebuild. Choose to Rebuild iPhoto Library Database from automatic backup.
    If that fails:
    Option 2
    Download iPhoto Library Manager and use its rebuild function. This will create a new library based on data in the albumdata.xml file. Not everything will be brought over - no slideshows, books or calendars, for instance - but it should get all your albums and keywords back.
    Because this process creates an entirely new library and leaves your old one untouched, it is non-destructive, and if you're not happy with the results you can simply return to your old one. .
    Regards
    TD

Maybe you are looking for