Active Directory Administration Cookbook

Getting ready

To link a GPO to an OU, log into a system with the Group Policy Management Console installed with an account that is one of the following:

• A member of the Domain Admins group
• The current owner of the GPO, and have the Link GPOs permission on the OU(s), Site(s), and/or Domain(s) where the Group Policy Object is to be linked
• Delegated the Edit Settings or Edit settings, delete and modify security permission on the GPO, and have the Link GPOs permission on the OUs, Site(s), and/or Domain(s) where the GPO is to be linked