Re: OU delegation



Restricted Group definitions in GPO may be used to add a domain
group as a member in a machine local group. Until the computers
in that OU believe that the accounts with the OU delegation have
rights on/over them the OU delegation will be limited to privileges
on the computer objects in AD (as distinct from the computers).

Roger

"tin" <mastertin@xxxxxxxxxxxxxxxx> wrote in message
news:OMeNs85zHHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
Hello, I've delegated full controll to a security group to an OU, but that
group still not able to manage computers remotely. For instance, they
cannot perform administrative tasks on computers in that are in this OU. I
know I can run a script to add this security group to all the active
computers in that OU but I just wanted to know if there's another way to
do this? I dont think you can automate this through GPO though, but I
could be wrong.

Thanks,
TC



.



Relevant Pages

  • Re: Active Directory Folders
    ... >> I'm certainly not going to discount a book published by Microsoft ... >> replace the computers and users containers created by default and ... Passowords can only be set in a GPO at the ... Laptops ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policy to apply only to some workstations
    ... Gregg Hill wrote: ... the GPMC and clicked on SBSComputers, and there are no GPOs linked. ... I guess the next question would be "Why do the computers even need ... GPO) settings from applying to select computers? ...
    (microsoft.public.windows.server.sbs)
  • Re: Group policy to apply only to some workstations
    ... Inheritance" tab under SBSComputers, it shows a bunch of linked GPOs. ... settting to only select computers or block some standard SBS (domain GPO) ...
    (microsoft.public.windows.server.sbs)
  • Re: Help with Security Filtering
    ... Security Tab for the GPO itself. ... Is there a way to see the ACL in the GPO that they are being applied to ... the computers, besides just noticing the changes live. ... Filtering" tab with 7 of the Security Groups listed, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question on organizing Computers
    ... Sounds like you have it right - one of the main purposes of Organizational ... GPO settings. ... > Currently all of my computers, including servers, are in the "Computers"> folder in Active Directory and I would like to create two "Orginzational> Units" or "Groups". ...
    (microsoft.public.win2000.active_directory)