Article ID: 275715
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows 2000 Service Pack 1
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q275715
SUMMARY
This article describes how to delegate administration of group policies. When you use a Windows 2000-based computer, you can delegate the authority of group policies by policy name, for example, the group policy for a site, domain, or organizational unit. You may want to grant other administrators or users the permission to modify these policies in the administrators' or users' particular site, domain, or organizational unit without granting those administrators or users write permissions to create new policies or delete existing policies.
back to the top
Grant a User Permission to Change Group Policy
To grant a user the permissions to make changes to an existing policy:
- Start the Active Directory Users and Computers snap-in for Microsoft Management Console (MMC).
- Right-click the site, domain, or organizational unit that you want other users or administrators to manage, and then click Properties.
- On the Group Policy tab, click the policy for which you want to delegate administration, and then click Properties.
- On the Security tab, click Add.
- Add the user or group that you want to manage the policy, and then grant the user or group write permission for the policy.
- Quit MMC.
Additional query words: ou
Keywords: kbenv kbhowto kbhowtomaster kbsetup KB275715
