{"id":72,"date":"2010-06-03T10:33:17","date_gmt":"2010-06-03T10:33:17","guid":{"rendered":""},"modified":"2010-06-03T10:35:57","modified_gmt":"2010-06-03T10:35:57","slug":"delegating_group_policy_objects","status":"publish","type":"post","link":"https:\/\/blogs.ncl.ac.uk\/isg\/?p=72","title":{"rendered":"Delegating Group Policy Objects"},"content":{"rendered":"<p>A common issue which we hear about is IT Staff who manage delegated Organisational Units (OU) in the Active Directory not being able to edit Group Policy Objects (GPOs) created by other members of their team or people who have left the University. <\/p>\n<p>When a GPO is created the creator (along with some other built in <a href=\"https:\/\/blogs.ncl.ac.uk\/blogs\/index.php\/wit\/2010\/02\/24\/security_principals_ace_acls_dacls_and_s\">Security Principals<\/a> are assigned rights to Edit, Settings, delete or modify security. No one else will have these rights until they are assigned them. As with nearly all cases when working with Active Directory the best way to do this is via Group membership. <\/p>\n<p>Every OU we delegate has an Admin Group associated with it for example ISS OU Admin Group or and this is the one you should use. If you are not sure what yours is called each for your s-id in Active Directory and select the &#8216;Member of&#8217; tab from its properties. Once you know the name of your group you can delegate your GPOs.<\/p>\n<p><strong>Steps to Delegate GPOs<\/strong><\/p>\n<p>1.\tFrom within the GPMC (Group Policy Management Console) Select the Delegation Tab<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/wit.ncl.ac.uk\/blog_files\/James\/gpo1.png\" alt=\"\" title=\"\" \/><\/p>\n<p>2. Select the Add button from the bottom of the screen.<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/wit.ncl.ac.uk\/blog_files\/James\/gpo2.png\" alt=\"\" title=\"\" \/><\/p>\n<p>3. Add your OU Admin Group Name and select OK.<\/p>\n<p>5. Select &#8216;Edit settings, delete, modify security&#8217; and select OK. <\/p>\n<p><img decoding=\"async\" src=\"http:\/\/wit.ncl.ac.uk\/blog_files\/James\/gpo4.png\" alt=\"\" title=\"\" \/><\/p>\n<p>6. Now all members of your OU Admin Group can edit the GPO<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/wit.ncl.ac.uk\/blog_files\/James\/gpo3.png\" alt=\"\" title=\"\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A common issue which we hear about is IT Staff who manage delegated Organisational Units (OU) in the Active Directory not being able to edit Group Policy Objects (GPOs) created by other members of their team or people who have &hellip; <a href=\"https:\/\/blogs.ncl.ac.uk\/isg\/?p=72\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":4740,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-72","post","type-post","status-publish","format-standard","hentry","category-activedirectory"],"_links":{"self":[{"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=\/wp\/v2\/posts\/72","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=\/wp\/v2\/users\/4740"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=72"}],"version-history":[{"count":0,"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=\/wp\/v2\/posts\/72\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=72"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=72"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ncl.ac.uk\/isg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=72"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}