Microsoft KB Archive/275715

= HOW TO: Delegate Administration of Group Policies =

Article ID: 275715

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q275715





IN THIS TASK
SUMMARY
 * Grant a User Permission to Change Group Policy



SUMMARY
This article describes how to delegate administration of group policies. When you use a Windows 2000-based computer, you can delegate the authority of group policies by policy name, for example, the group policy for a site, domain, or organizational unit. You may want to grant other administrators or users the permission to modify these policies in the administrators' or users' particular site, domain, or organizational unit without granting those administrators or users write permissions to create new policies or delete existing policies.

back to the top

Grant a User Permission to Change Group Policy
To grant a user the permissions to make changes to an existing policy:
 * 1) Start the Active Directory Users and Computers snap-in for Microsoft Management Console (MMC).
 * 2) Right-click the site, domain, or organizational unit that you want other users or administrators to manage, and then click Properties.
 * 3) On the Group Policy tab, click the policy for which you want to delegate administration, and then click Properties.
 * 4) On the Security tab, click Add.
 * 5) Add the user or group that you want to manage the policy, and then grant the user or group write permission for the policy.
 * 6) Quit MMC.

back to the top

Additional query words: ou

Keywords: kbenv kbhowto kbhowtomaster kbsetup KB275715

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.