O'Reilly logo

Windows Server® 2008 Administrator’s Companion by Charlie Russel and Sharon Crawford

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Delegating Permissions on GPOs

Not every network is of the size and complexity that requires delegation of permissions on GPOs. However, many networks are this complicated, so if you’re considering handing off some of the responsibility for GPOs, keep the following issues in mind:

  • If permission is set to inherit to all child containers, authority delegated at the domain level will affect all objects in the domain.

  • Permissions granted at the OU level can affect just that OU or that OU plus its child OUs.

  • Control delegated at the site level is likely to span domains and can influence objects in domains other than the domain where the GPO is located.

  • Always assign control at the highest OU level possible.

Just about every chore connected with Group Policy ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required