Windows Server® 2012 Unleashed

GPO Administrative Delegation

GPO administrative delegation is a process that administrators can follow to delegate permissions to specific users or configure security rights across all GPOs or specific GPOs and GPO-related tasks on specific Active Directory containers, such as sites, domains, and OUs.

GPO delegation or delegation of administration within Active Directory should only be used in organizations that have separate IT groups that manage the infrastructure and servers and other groups that manage the desktop and support the end user. If the IT group of an organization contains administrators who all perform GPO and Active Directory administration, adding a delegation model might not be necessary and can add unnecessary complexity. ...