Delegate permissions to edit only certain settings in a GPO?

We are running a 2008R2 domain. I know this is doubtful, but thought I would ask.  We have lots of drive mappings through a single GPO(mapping is through GPP). I would like to delegate the editing of those drive mappings to help-desk
user. That is easy, but we are concerned about that delegation because this GPO is targeting all users in the company.  Is there anyway through powershell, or unique permissions applied to certain parts of the sysvol GPO, to block it so that certain users
can only edit specific parts of that GPO?  Basically, I want to restrict the editing of the GPO to only those drive mapping GPP settings.
Dan Heim

You cannot. And I would advice not to give help-desk permissions to edit a GPO in production.
You could do the drivemapping in a loginscript and have the logonscript read a file containing the mappings and give RW permisisons for that file to the helpdesk users.
MCP/MCSA/MCTS/MCITP

Similar Messages

  • In iTunes I click on a song and when I click on the "get info" tab, it opens up but everything is gray - locked, therefore, I cannot edit the year or genre of the songs. Not every song is locked, only certain ones for some reason. Any help?

    In iTunes I click on a song and when I click on the "get info" tab, it opens up but everything is gray - locked, therefore, I cannot edit the year or genre of the songs. Not every song is locked, only certain ones for some reason. Any help?

    I ran into the same problem, I think that, If you tab on a song that is on your IPOD, and the song data is grayed-out, I think it means that the song is probably twice on your IPOD and that the iTunes directory can not edit THAT song data for two (or more) files @once. Check if this is the case, sinceI have the same problem,am looking for a way to have One and the same song in more playlists but only keep the song once on the IPOD.

  • Possible to make an item editable for certain users and read only for other

    Is it possible to make an item editable for certain users and read only for others?
    I've been able to accomplish this by taken the select statement that I used to define an authorization scheme, placing it in the Read Only condition of the item. However, I would like to simply reference the authorization scheme to utilize caching, and to help keep things cleaner for future maintenance.
    Is it possible to reference an authorization scheme in an item condition similar to the way another item can be referenced by preceding it with a colon (i.e. :P1_First_Name)?

    Thank you, your suggestion worked.
    It would be nice on a future release of APEX if a drop-down box existed under the Ready Only section that would allow an existing Authorization Scheme to be selected or negated when applying the Read Only attribute to a form item.

  • Editing LAN settings in GP using only computer settings

    billyrobinson2 wrote:I have my GPO applied to the folder just containing the laptops, so in theory, I shouldn't need item-level targeting, correct?Correct.billyrobinson2 wrote:I have my GPO applied to the folder just containing the laptops, so in theory, I shouldn't need item-level targeting, correct?It's not so much the item that is the issue, it's how you apply the LAN settings, which are mostly user based. If you go to user configuration - Preferences - Control Panel - Internet settings, you can very easily make these changes, but they are user based.If I apply this change at a user level however, can I do item-level and tell it just to apply to the laptops? I'll test it outYes that would work, as long as the user objects / security group is within the scope and security filtering of the GPO.For example:User 1 logs onto Laptop1 -...

    Hi All
    I need to edit the IE LAN settings in GP using only computer settings. The changes I'm making are going to be applied to laptop users only, I don't want the settings applied to users as our users connect in various different ways (Desktops, laptops, so on)
    The changes I'm making cannot affect the desktops, only the laptops & it cannot affect all users, only laptop users.
    Tricky I know, but does anyone know how to do this? my Google searches have been unsuccessful so far!
    Thank you
    Bill
    This topic first appeared in the Spiceworks Community

  • Only CERTAIN videos will not import in BOTH versions of iMovie

    Heya, I'm dying here, hoping someone can help:
    I've been filming video with my camera, but for some reason, one out of every 6 or 7 times a file will absolutely not import into iMovie.
    They play absolutely fine with audio and everything in Quicktime, but when I try to import to iMovie '08, they simply do not show up as thumbnails even though it goes through the whole "creating thumbnails" process.
    When I try importing them into iMovie HD 6, I get a "file cannot be imported: unknown error" message.
    Everything else I film with my camera and import into either version of iMovie works just fine! It's only certain ones... but it always happens to be the most important clips!
    There's GOT to be some way to fix this, right?

    Everything was filmed with the exact same settings.
    Your argument here is "inductive" and does not confirm that all stored files are in fact in the same compression format and settings. You need to apply a "deductive" approach. As I implied and QT Kirk specifically stated, you need to actually examine the files to determine their internal specifications -- comparing the working with non-working files to look for differences.
    I've tried Streamclip, but when I try to save it as an avi, mpeg, dv, or even a renamed mov file, it says "Error: Could not prepare clip"
    If your are trying to use the "Save As..." option here, you are not, in fact, performing a "conversion" but rather merely attempting to place the same content in a different file container. MPEG Streamclip does not, for instance, have the ability to export non-MPEG2 content to MPEG (MPEG-2 'muxed" or elementary streams) which would be incompatible with iMovie '08 in any event. As to AVI, you mush have one of the required AVI QT components installed and the compression formats you are trying to place in the AVI container must be compatible with the AVI container which is itself compatible with iMovie '08 as long as its contents are already edit compatible. As to DV, this one one usually difficult to mess up unless you were trying to turn it into a transport stream.
    today I tried taking the original quicktime MOV file from the camera (the one that plays just fine in quicktime AND streamclip, just won't convert or import)
    This statement seems to imply that something is wrong with your attempted work flow. If the file opens and plays in the QT Player and MPEG Streamclip, then it should be convertible. Once again, the primary problem is determining how to best perform this conversion which is why Karsten, QT Kirk, and I need specific information regarding the actual compression format, whether or not the compression settings were compatible with the QT structure, and whether or not an extraneous track (e.g., a "Tweener") might be causing difficulties. Posting a screen capture of the "Inspector" and/or "Properties" window or a sample file should provide the needed information.

  • How can I sync only certain apps after a restore instead of all of them?

    I've been serisouly frustrated with iTunes trying to find a way to sync only the apps I want to sync. But iTunes insists that I sync every single app I have downloaded in the past to my phone and I don't want all of them on there. Now after restoring I have a bunch of apps on my phone waiting to sync and now have to either restore again or individually delete all 155 of them. Are there certain settings I'm missing here?  Please help!!

    Thanks for the help I did not receive
    Hey, glad I didn't help.
    I mean, you waited a whole 38 minutes for someone to volunteer their assistance.
    FYI:
    Select the iPhone in iTunes.
    Click the Apps tab.
    Click Sync apps and tick the apps you want to sync.
    Click Apply at bottom.
    You're welcome.
    After literally digging for forever.
    Something less than 38 minutes is forever? (time it took to post first question, find answer, get upset and post 2nd time).
    Oh, and thanks for posting how you resolved the issue so others (who may not get an immediate reply) will know how to solve a similar issue without getting upset.

  • How do I edit my firewall settings

    How di I edit my firewall settings?

    Hey there jacque,
    It sounds like you would like to edit your firewall settings. I found this article for you to help you configure it named:
    OS X Mountain Lion: Prevent unwanted connections with a firewall
    http://support.apple.com/kb/PH11309
    Turn on firewall protection
    Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
    Click the lock icon to unlock it, and then type an administrator name and password.
    Click Turn On Firewall.
    Allow only specified apps and services to connect
    Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
    Click the lock icon to unlock it, and then type an administrator name and password.
    Click Firewall Options.
    Click Add (+), and then select the app or service in the dialog that appears.
    Allow only essential apps and services to connect
    Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
    Click the lock icon to unlock it, and then type an administrator name and password.
    Click Firewall Options.
    Select the “Block all incoming connections” checkbox.
    Allow signed software to receive incoming connections
    Choose Apple menu > System Preferences, click Security & Privacy, and then click Firewall.
    Click the lock icon to unlock it, and then type an administrator name and password.
    Click Firewall Options.
    Select the “Automatically allow signed software to receive incoming connections” checkbox.
    Thank you for using Apple Support Communities.
    Cheers,
    Sterling

  • Read Only Display Settings Help

    Hello,
    I am trying to control what some users can see in a page. Right now I have an item field (Roles) display as checkbox. Roles is a field in my table that I created with RolesA, RolesB, RolesC. Note: these are not htmldb roles.
    In my Edit Page Item --> Read Only Display Settings --> Read Only Condition Type --> PL/SQL Function Body Returning a Boolean. Under Expression 1, I coded:
    return not htmldb_util.current_user_in_group(p_group_name => 'APP Admin')
    I want this item to read-only unless the user happens to be a member of group 'APP Admin'.
    The expression is not working. It seems that no matter what user is logged in they can modify this item. Is there another way I can do this for controlling what my RolesA, RolesB, and RolesC can modify? BTW, this item is a checkbox.

    Dung,
    That API seems to have a bug, it returns true/false/null, so you could use 'return not nvl(htmldb_util.current_user_in_group(p_group_name => 'APP Admin'),false)' to get a false value.
    Unfortunately there's another problem: using the read-only attributes for checkbox or radiogroup item makes them hidden. My suggestion would be to create another item that has disabled="disabled" in the HTML Form Element attribute in the item definition and display that item or the non-disabled item alternately, using conditions based on the current_user_in_group logic.
    Scott

  • How can I edit the privacy settings for my daughters Apple ID.

    My daughter has forgotten her privacy settings. She has $80 in credit and would like to use them. How can she edit her privacy settings?

    What do you mean by 'privacy settings' ?
    If you mean the Settings > General > Restrictions passcode on her iPad then was it on the iPad when she last backed up ? If not then she can restore to that backup and it should be removed. If it was on the iPad when she last backed up then the only way to remove it is to reset the iPad back to factory defaults and she can then re-sync your content back to her iPad - she won't be able to restore to the backup as that will keep the code in place.
    If you mean the answers to her security questions, then if she has a rescue email address (which is not the same thing as an alternate email address) on her account then the steps on this page will give you a reset link on her account : http://support.apple.com/kb/HT6170
    If she doesn't have a rescue email address (she won't be able to add one until she can answer her questions) then sher will need to contact Support in her country to get the questions reset.
    Contacting Apple about account security : http://support.apple.com/kb/HT5699
    When they've been reset (and if she doesn't already have a rescue email address) sher can then use the steps on this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5620
    If you mean something else ... ?

  • How do I edit the default settings to always embed fonts?

    How do I edit the default settings in Acrobat Pro XI to always embed fonts?

    Do not use the Std job settings, but use the Press or Print settings. You can also edit the properties of the Job Settings (best done in Distiller) to not exclude any fonts and embed all as subset fonts. Be sure to check the option to continue if embedding is not possible or your creation will fail if you used a font that is not licensed for embedding (Acrobat will only embed fonts that are legally licensed for embedding -- most are, but not all).
    If you edit the Std, you will need to save to a new name. You might use MyStd or such. Then go to the Start>Printers and edit the properties of the Adobe PDF printer to make that settings file the default. If you use PDF Maker, you will have to change the PDF Maker preferences also (PDF Maker seems to use the last selection, not the default in the printer). Hopefully that is clear enough.

  • How do I export only certain bookmarks, them import those certain bookmarks ?

    I have tons of bookmarks. I have them in certain folders. If you backup or export it backs up and exports all bookmarks. How do I backup or export only certain bookmarks, so that I can import those certain bookmarks on another computer without having to import ALL the bookmarks....??
    thanks
    ken

    You will have to edit all bookmarks to an HTML file and edit that file to only keep the wanted bookmarks.<br />
    Firefox still doesn't have a way to only export specific bookmarks.
    See also:
    *[/questions/737050]

  • How can I disable the Edit- Preferences- Network- Settings- Noproxy option

    I want to disable the Edit->Preferences->Network->Settings->Noproxy option
    Every user user should access internet only via proxy settings what i should do for that and also should not be allowed to change the option

    Note that on Linux, the default is to use the "Use the system proxy settings" setting for the connection.
    You can look at these prefs to lock:
    *http://kb.mozillazine.org/network.proxy.type
    *http://kb.mozillazine.org/network.proxy.%28protocol%29
    *http://kb.mozillazine.org/network.proxy.%28protocol%29_port
    Use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
    Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
    pref("general.config.filename", "mozilla.cfg");
    These functions can be used in the mozilla.cfg file:
    defaultPref(); // set new default value
    pref(); // set pref, but allow changes in current session
    lockPref(); // lock pref, disallow changes

  • Only certain keys work on Apple Bluetooth keyboard

    Discarted my Apple Wireless keyboard that came with my imac because only certain keys worked (4 or 5 keys). Finally bout another Apple Wireless keyboard, and have the same problem. All the settings are correct. any advice?

    Sometimes this is caused by accidently setting "mouse keys" on by hitting the Option key 5 times. 
    Look in System Preferences > Universal Access > Mouse & Trackpad tab > Turn Mouse Keys off.
    Regards,
    Captfred

  • Syndicate only certain Tuple Records

    Hi Experts,
    We are using MDM 7.1 SP03. Is there any way that I can syndicate only certain tuple records?
    Example:
    Customer Master has two Purchase Organization records inside a multi-valued Purchase Organization Tuple. One record uses Purchase Org code = 4100 and the other record uses Purchase Org = 4005. Is there any way to syndicate out only the Purchase org record with code 4100?
    I have tried to use the filtering options in the syndicator: Filter Qualified Links and Filter Multi-valued Lookup fields. This does not work.
    I have the search parameters set to Customer records with Purchase org = 4100, and the customer record has two tuple records (4100 and 4005) the syndicator will push out both records. I only want the 4100 record to push out. Please help!
    Edited by: Matthew Winchester on Feb 3, 2011 5:01 PM

    -These records are not Remote System specific.-
    -The search criteria using expressions do not work-
    Example XML Structure:
    <Account_Group>Z001</Account_Group>
      <Name_1>Test, Inc</Name_1>
      <Search_Term_1>HQ</Search_Term_1>
      <Search_Term_2>Serach One</Search_Term_2>
      <Street>Main Rd</Street>
      <House_Number>300</House_Number>
      <City_Postal_Code>12345</City_Postal_Code>
      <City>Cumming</City>
      <Country>US</Country>
      <Region>GA</Region>
      <Address_Time_Zone>EST</Address_Time_Zone>
      <Transportation_Zone>XXX3432</Transportation_Zone>
      <Language>E</Language>
      <Remote_Key />
      <Tax_Number_2>5464654654654</Tax_Number_2>
    - <Vendor_Company_Code_Data>
      <Company_Code>4005</Company_Code>
      <Reconciliation_Account>4100000</Reconciliation_Account>
      <Sort_Key>009</Sort_Key>
      <Payment_Term>ZD22</Payment_Term>
      <Double_Invoice>X</Double_Invoice>
      <Payment_Term_Credit_Memos>ZD22</Payment_Term_Credit_Memos>
      <Payment_Method>F</Payment_Method>
      <Vendor_Withholding_Tax_Data />
      </Vendor_Company_Code_Data>
    - <Vendor_Company_Code_Data>
      <Company_Code>1700</Company_Code>
      <Reconciliation_Account>4100000</Reconciliation_Account>
      <Sort_Key>009</Sort_Key>
      <Payment_Term>ZD22</Payment_Term>
      <Double_Invoice>X</Double_Invoice>
      <Payment_Term_Credit_Memos>ZD22</Payment_Term_Credit_Memos>
      <Payment_Method>F</Payment_Method>
      <Vendor_Withholding_Tax_Data />
      </Vendor_Company_Code_Data>
    Senario: I export this entire record out using the syndicator. When importing into a different repository is there a way that i can ignore the segment with Company Code 4005, and only create the segment for company code 4100? It would be great to be able to handle this automatically....any sugestions? I need to be able to filter out certain company code records from importing, since there is no way to filter out during syndication, can this be handled using the Import Manager?
    Edited by: Matthew Winchester on Feb 3, 2011 10:27 PM

  • Premiere Pro CS5 crashing when exporting (only certain file types)

    Hi
    I have found that when I try and export media in Premiere Pro CS5, it often crashes during the export. It says
    It's only certain file types. For instance, Vimeo HD seems okay but Vimeo SD always crashes mid-export. MPEG is okay too, but MPEG2-DVD always crashes.
    Sometimes it says this: "Error Compiling Movie - Unknown Error" but doesn't throw me out of Premiere altogether.
    Other times it crashes altogether and Windows gives me this error message: "Display driver NVIDIA Windows Kernel Mode Driver, Version 258.96 stopped responding and has successfully recovered". Premiere Pro then stops responding so I have to re-open it and start exporting again.
    I have checked there are no gaps in my timeline and I have rendered the whole work area. Besides, I doubt it's anything that I'm doing wrong with the project itself because it's exporting fine in some formats.
    I am also experiencing random crashes when editing too. Not that often, but occasionally it throws me out - and twice it has made the whole screen go crazy, with weird dotting across the screen (it's scary, it looks like the monitor itself has broken!).
    Any help would be appreciated!
    Nick
    PS I have a pretty decent new PC - Dell Studio XPS, 8GB, 2x1TB drives, etc. Premiere itself is working great, except for these crashes.

    Some drivers do not work well in some systems... so go to nVidia and try a different (usually newer) driver for your card
    These notes are for Encore, but they MAY also work in Premiere
    Long File Names or odd characters Cause Crashing http://forums.adobe.com/thread/588273
    And #4 Here http://forums.adobe.com/thread/666558?tstart=0
    And This Message Thread http://forums.adobe.com/thread/665641?tstart=0

Maybe you are looking for