HOW TO: Delegate Administration of Group Policies (275715)

SUMMARY

This article describes how to delegate administration of group policies. When you use a Windows 2000-based computer, you can delegate the authority of group policies by policy name, for example, the group policy for a site, domain, or organizational unit. You may want to grant other administrators or users the permission to modify these policies in the administrators' or users' particular site, domain, or organizational unit without granting those administrators or users write permissions to create new policies or delete existing policies.

back to the top

Grant a User Permission to Change Group Policy

To grant a user the permissions to make changes to an existing policy:

1. Start the Active Directory Users and Computers snap-in for Microsoft Management Console (MMC).
2. Right-click the site, domain, or organizational unit that you want other users or administrators to manage, and then click Properties.
3. On the Group Policy tab, click the policy for which you want to delegate administration, and then click Properties.
4. On the Security tab, click Add.
5. Add the user or group that you want to manage the policy, and then grant the user or group write permission for the policy.
6. Quit MMC.

back to the top